Lucene search

[email protected]CVE-2011-5099

HistoryAug 14, 2012 - 10:55 p.m.

CVE-2011-5099

2012-08-1422:55:01

CWE-89

[email protected]

web.nvd.nist.gov

cve-2011-5099

sql injection

ccnewsletter

joomla

vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

59.9%

JSON

SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected configurations

NVD

Node

chillcreationsmod_ccnewsletterMatch1.0.7

chillcreationsmod_ccnewsletterMatch1.0.8

chillcreationsmod_ccnewsletterMatch1.0.9

AND

joomlajoomla\!

CPENameOperatorVersion
chillcreations:mod_ccnewsletterchillcreations mod ccnewslettereq1.0.7
chillcreations:mod_ccnewsletterchillcreations mod ccnewslettereq1.0.8
chillcreations:mod_ccnewsletterchillcreations mod ccnewslettereq1.0.9

CPE	Name	Operator	Version
chillcreations:mod_ccnewsletter	chillcreations mod ccnewsletter	eq	1.0.7
chillcreations:mod_ccnewsletter	chillcreations mod ccnewsletter	eq	1.0.8
chillcreations:mod_ccnewsletter	chillcreations mod ccnewsletter	eq	1.0.9

References

packetstormsecurity.org/files/112092/Joomla-CCNewsLetter-1.0.7-SQL-Injection.html

secunia.com/advisories/48934

www.chillcreations.com/blog/5-ccnewsletter-joomla-newsletter/274-ccnewsletter-1010-security-release.html

www.securityfocus.com/bid/53208

exchange.xforce.ibmcloud.com/vulnerabilities/75112

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

59.9%

JSON

Related for CVE-2011-5099

cvelist2 nvd2 prion2 cve1