CVE-2014-9102

2022-10-0316:20:40

mitre

www.cve.org

cve-2014-9102

sql injection

kunena component

joomla

remote authenticated users

arbitrary sql commands

array parameter

8.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.9%

JSON

Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrary SQL commands via the index value in an array parameter, as demonstrated by the topics[] parameter in an unfavorite action to index.php.