Lucene search
HistoryJul 21, 2014 - 2:55 p.m.
CVE-2014-4960
cve-2014-4960
sql injection
youtube gallery
joomla
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
35.0%
Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery (com_youtubegallery) component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) listid or (2) themeid parameter to index.php.
Affected configurations
Node
joomlaboatcom_youtubegalleryMatch3.9.0joomla\!
ORjoomlaboatcom_youtubegalleryMatch3.9.2joomla\!
ORjoomlaboatcom_youtubegalleryMatch3.9.3joomla\!
ORjoomlaboatcom_youtubegalleryMatch3.9.4joomla\!
ORjoomlaboatcom_youtubegalleryMatch3.9.5joomla\!
ORjoomlaboatcom_youtubegalleryMatch3.9.6joomla\!
ORjoomlaboatcom_youtubegalleryMatch3.9.7joomla\!
ORjoomlaboatcom_youtubegalleryMatch3.9.8joomla\!
ORjoomlaboatcom_youtubegalleryMatch3.9.9joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.0.0joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.0.1joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.0.2joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.0.8joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.0.9joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.1.0joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.1.1joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.1.2joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.1.3joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.1.4joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.1.5joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.1.6joomla\!
ORjoomlaboatcom_youtubegalleryMatch4.1.7joomla\!
Related
packetstorm
packetstorm
Joomla Youtube Gallery 4.1.7 SQL Injection
2014-07-16 00:00:00
Joomla YoutubeGallery 4.5.8 Database Disclosure / SQL Injection
2019-01-17 00:00:00
prion
prion
Sql injection
2014-07-21 14:55:00
nvd
nvd
CVE-2014-4960
2014-07-21 14:55:06
openvas
openvas
Joomla! YouTube Gallery Component 'gallery.php' SQL Injection Vulnerability
2014-07-24 00:00:00
cvelist
cvelist
CVE-2014-4960
2014-07-21 14:00:00
zdt
zdt
Joomla Youtube Gallery Component - SQL Injection Vulnerability
2014-07-17 00:00:00
exploitpack
exploitpack
Joomla! Component Youtube Gallery 4.1.7 - SQL Injection
2014-07-16 00:00:00
exploitdb
exploitdb
Joomla! Component Youtube Gallery 4.1.7 - SQL Injection
2014-07-16 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
35.0%
Related for CVE-2014-4960