Sql injection

2009-02-1918:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.5%

JSON

SQL injection vulnerability in the Mad4Joomla Mailforms (com_mad4joomla) component before 1.1.8.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jid parameter to index.php.

CPENameOperatorVersion
com_mad4joomlale1.1.8.1
com_mad4joomlaeq1.1
com_mad4joomlaeq1.1.1
com_mad4joomlaeq1.1.2
com_mad4joomlaeq1.1.3
com_mad4joomlaeq1.1.4
com_mad4joomlaeq1.1.5
com_mad4joomlaeq1.1.6
com_mad4joomlaeq1.1.7
com_mad4joomlaeq1.1.8

Name	Operator	Version
com_mad4joomla	le	1.1.8.1
com_mad4joomla	eq	1.1
com_mad4joomla	eq	1.1.1
com_mad4joomla	eq	1.1.2
com_mad4joomla	eq	1.1.3
com_mad4joomla	eq	1.1.4
com_mad4joomla	eq	1.1.5
com_mad4joomla	eq	1.1.6
com_mad4joomla	eq	1.1.7
com_mad4joomla	eq	1.1.8

References

secunia.com/advisories/32239

www.mad4media.de/mad4joomla-mailforms-faq.html

www.mad4media.de/mad4joomla-mailforms.html

www.securityfocus.com/bid/31712

exchange.xforce.ibmcloud.com/vulnerabilities/45815

www.exploit-db.com/exploits/6724