Sql injection

2007-12-1501:46:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.9%

JSON

SQL injection vulnerability in index.php in the RSGallery (com_rsgallery) 2.0 beta 5 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an inline page action.

CPENameOperatorVersion
rs_gallery2eqbeta-5

CPE	Name	Operator	Version
	rs_gallery2	eq	beta-5

References

advisories.echo.or.id/adv/adv86-K-159-2007.txt

www.securityfocus.com/archive/1/484606/100/100/threaded

www.securityfocus.com/bid/26704

www.exploit-db.com/exploits/4691