Sql injection

2009-04-0714:17:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.1%

JSON

SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.

CPENameOperatorVersion
com_webhostingle1.1
com_webhostingeq0.5 beta
com_webhostingeq0.5.3 beta
com_webhostingeq0.5.4 beta
com_webhostingeq0.5.5 beta
com_webhostingeq0.5.6 beta
com_webhostingeq1.0 stable
com_webhostingeq1.0.1 stable
com_webhostingeq1.1 rc4
com_webhostingeq1.1 rc2

Name	Operator	Version
com_webhosting	le	1.1
com_webhosting	eq	0.5 beta
com_webhosting	eq	0.5.3 beta
com_webhosting	eq	0.5.4 beta
com_webhosting	eq	0.5.5 beta
com_webhosting	eq	0.5.6 beta
com_webhosting	eq	1.0 stable
com_webhosting	eq	1.0.1 stable
com_webhosting	eq	1.1 rc4
com_webhosting	eq	1.1 rc2