Sql injection

2010-02-2700:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.4%

JSON

SQL injection vulnerability in the SQL Reports (com_sqlreport) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter to ajax/print.php. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
com_sqlreporteq1.1

CPE	Name	Operator	Version
	com_sqlreport	eq	1.1

References

osvdb.org/62534

secunia.com/advisories/38678

www.packetstormsecurity.com/1002-exploits/joomlasqlreport-sql.txt

www.securityfocus.com/bid/38361

exchange.xforce.ibmcloud.com/vulnerabilities/56476

exchange.xforce.ibmcloud.com/vulnerabilities/56541

www.exploit-db.com/exploits/11549