Sql injection

2008-03-2418:44:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.0%

JSON

SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.

CPENameOperatorVersion
com_joovideoeq1.0
com_joovideoeq1.2.2

CPE	Name	Operator	Version
	com_joovideo	eq	1.0
	com_joovideo	eq	1.2.2

References

secunia.com/advisories/29474

www.securityfocus.com/bid/28318

exchange.xforce.ibmcloud.com/vulnerabilities/41279

www.exploit-db.com/exploits/5277