Lucene search

MitreCVE-2015-7857

HistoryOct 29, 2015 - 8:59 p.m.

CVE-2015-7857

2015-10-2920:59:11

CWE-89

mitre

web.nvd.nist.gov

cve-2015-7857

sql injection

joomla

remote attack

nvd

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.814

Percentile

98.4%

JSON

SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to execute arbitrary SQL commands via the list[select] parameter to index.php.

Affected configurations

Nvd

Node

joomlajoomla\!Match3.2.0

joomlajoomla\!Match3.2.1

joomlajoomla\!Match3.2.2

joomlajoomla\!Match3.2.3

joomlajoomla\!Match3.2.4

joomlajoomla\!Match3.3.0

joomlajoomla\!Match3.3.1

joomlajoomla\!Match3.3.2

joomlajoomla\!Match3.3.3

joomlajoomla\!Match3.3.4

joomlajoomla\!Match3.4.0

joomlajoomla\!Match3.4.1

joomlajoomla\!Match3.4.2

joomlajoomla\!Match3.4.3

joomlajoomla\!Match3.4.4

VendorProductVersionCPE
joomlajoomla\!3.2.0cpe:2.3:a:joomla:joomla\!:3.2.0:*:*:*:*:*:*:*
joomlajoomla\!3.2.1cpe:2.3:a:joomla:joomla\!:3.2.1:*:*:*:*:*:*:*
joomlajoomla\!3.2.2cpe:2.3:a:joomla:joomla\!:3.2.2:*:*:*:*:*:*:*
joomlajoomla\!3.2.3cpe:2.3:a:joomla:joomla\!:3.2.3:*:*:*:*:*:*:*
joomlajoomla\!3.2.4cpe:2.3:a:joomla:joomla\!:3.2.4:*:*:*:*:*:*:*
joomlajoomla\!3.3.0cpe:2.3:a:joomla:joomla\!:3.3.0:*:*:*:*:*:*:*
joomlajoomla\!3.3.1cpe:2.3:a:joomla:joomla\!:3.3.1:*:*:*:*:*:*:*
joomlajoomla\!3.3.2cpe:2.3:a:joomla:joomla\!:3.3.2:*:*:*:*:*:*:*
joomlajoomla\!3.3.3cpe:2.3:a:joomla:joomla\!:3.3.3:*:*:*:*:*:*:*
joomlajoomla\!3.3.4cpe:2.3:a:joomla:joomla\!:3.3.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
joomla	joomla\!	3.2.0	cpe:2.3:a:joomla:joomla\!:3.2.0:::::::*
joomla	joomla\!	3.2.1	cpe:2.3:a:joomla:joomla\!:3.2.1:::::::*
joomla	joomla\!	3.2.2	cpe:2.3:a:joomla:joomla\!:3.2.2:::::::*
joomla	joomla\!	3.2.3	cpe:2.3:a:joomla:joomla\!:3.2.3:::::::*
joomla	joomla\!	3.2.4	cpe:2.3:a:joomla:joomla\!:3.2.4:::::::*
joomla	joomla\!	3.3.0	cpe:2.3:a:joomla:joomla\!:3.3.0:::::::*
joomla	joomla\!	3.3.1	cpe:2.3:a:joomla:joomla\!:3.3.1:::::::*
joomla	joomla\!	3.3.2	cpe:2.3:a:joomla:joomla\!:3.3.2:::::::*
joomla	joomla\!	3.3.3	cpe:2.3:a:joomla:joomla\!:3.3.3:::::::*
joomla	joomla\!	3.3.4	cpe:2.3:a:joomla:joomla\!:3.3.4:::::::*