Lucene search

[email protected]CVE-2008-6181

HistoryFeb 19, 2009 - 6:30 p.m.

CVE-2008-6181

2009-02-1918:30:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2008-6181

sql injection

mad4joomla mailforms

com_mad4joomla

security vulnerability

joomla

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.6%

JSON

SQL injection vulnerability in the Mad4Joomla Mailforms (com_mad4joomla) component before 1.1.8.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jid parameter to index.php.

Affected configurations

NVD

Node

joomlajoomla

AND

mad4mediacom_mad4joomlaRange≤1.1.8.1

mad4mediacom_mad4joomlaMatch1.1

mad4mediacom_mad4joomlaMatch1.1.1

mad4mediacom_mad4joomlaMatch1.1.2

mad4mediacom_mad4joomlaMatch1.1.3

mad4mediacom_mad4joomlaMatch1.1.4

mad4mediacom_mad4joomlaMatch1.1.5

mad4mediacom_mad4joomlaMatch1.1.6

mad4mediacom_mad4joomlaMatch1.1.7

mad4mediacom_mad4joomlaMatch1.1.8

CPENameOperatorVersion
mad4media:com_mad4joomlamad4media com mad4joomlale1.1.8.1
mad4media:com_mad4joomlamad4media com mad4joomlaeq1.1
mad4media:com_mad4joomlamad4media com mad4joomlaeq1.1.1
mad4media:com_mad4joomlamad4media com mad4joomlaeq1.1.2
mad4media:com_mad4joomlamad4media com mad4joomlaeq1.1.3
mad4media:com_mad4joomlamad4media com mad4joomlaeq1.1.4
mad4media:com_mad4joomlamad4media com mad4joomlaeq1.1.5
mad4media:com_mad4joomlamad4media com mad4joomlaeq1.1.6
mad4media:com_mad4joomlamad4media com mad4joomlaeq1.1.7
mad4media:com_mad4joomlamad4media com mad4joomlaeq1.1.8

CPE	Name	Operator	Version
mad4media:com_mad4joomla	mad4media com mad4joomla	le	1.1.8.1
mad4media:com_mad4joomla	mad4media com mad4joomla	eq	1.1
mad4media:com_mad4joomla	mad4media com mad4joomla	eq	1.1.1
mad4media:com_mad4joomla	mad4media com mad4joomla	eq	1.1.2
mad4media:com_mad4joomla	mad4media com mad4joomla	eq	1.1.3
mad4media:com_mad4joomla	mad4media com mad4joomla	eq	1.1.4
mad4media:com_mad4joomla	mad4media com mad4joomla	eq	1.1.5
mad4media:com_mad4joomla	mad4media com mad4joomla	eq	1.1.6
mad4media:com_mad4joomla	mad4media com mad4joomla	eq	1.1.7
mad4media:com_mad4joomla	mad4media com mad4joomla	eq	1.1.8

References

secunia.com/advisories/32239

www.mad4media.de/mad4joomla-mailforms-faq.html

www.mad4media.de/mad4joomla-mailforms.html

www.securityfocus.com/bid/31712

exchange.xforce.ibmcloud.com/vulnerabilities/45815

www.exploit-db.com/exploits/6724

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.6%

JSON

Related for CVE-2008-6181

prion1 nvd1 cvelist1