CVE-2006-1049

Опубликовано: 07 мар. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via unknown attack vectors.

Ссылки

http://secunia.com/advisories/19105
Patch
Vendor Advisory
http://www.joomla.org/content/view/938/78/
http://www.osvdb.org/23819
http://www.vupen.com/english/advisories/2006/0818
Vendor Advisory
http://secunia.com/advisories/19105
Patch
Vendor Advisory
http://www.joomla.org/content/view/938/78/
http://www.osvdb.org/23819
http://www.vupen.com/english/advisories/2006/0818
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*

Версия до 1.0.7 (включая)

cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*

EPSS

Процентиль: 2%

0.00014

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-c7hm-r6rv-6q97

github

почти 4 года назад