Lucene search
+L
JoomlaworksCom K2

1 matches found

CVE
CVE
added 2009/07/09 4:0 p.m.83 views

CVE-2009-2395

CVE-2009-2395 affects Joomla! with the K2 (com_k2) component 1.0.1 Beta and earlier. The vulnerability is an SQL injection in the itemlist action to index.php, exploitable via the category parameter, allowing remote attackers to execute arbitrary SQL commands. The provided connected documents con...

7.5CVSS8.4AI score0.03029EPSS
Save