CVE

Id
28134  
CVE No.
CVE-2007-4777  
Status
Candidate  
Description
SQL injection vulnerability in Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to the archive section. NOTE: this may be the same as CVE-2007-4778.  
Phase
Assigned (20070910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
291812 28134 CVE-2007-4777 BUGTRAQ:20070903 Multiple vulnerabilities in Joomla 1.5 RC 1  View
291813 28134 CVE-2007-4777 URL:http://www.securityfocus.com/archive/1/archive/1/478451/100/0/threaded  View
291814 28134 CVE-2007-4777 CONFIRM:http://www.joomla.org/content/view/3831/1/  View
291815 28134 CVE-2007-4777 BID:25508  View
291816 28134 CVE-2007-4777 URL:http://www.securityfocus.com/bid/25508  View
291817 28134 CVE-2007-4777 OSVDB:39070  View
291818 28134 CVE-2007-4777 URL:http://osvdb.org/39070  View
291819 28134 CVE-2007-4777 OSVDB:39071  View
291820 28134 CVE-2007-4777 URL:http://osvdb.org/39071  View
291821 28134 CVE-2007-4777 OSVDB:39072  View
291822 28134 CVE-2007-4777 URL:http://osvdb.org/39072  View
291823 28134 CVE-2007-4777 SREASON:3108  View
291824 28134 CVE-2007-4777 URL:http://securityreason.com/securityalert/3108  View
291825 28134 CVE-2007-4777 XF:joomla-filter-sql-injection(36423)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55672 JVNDB-2007-004364 Joomla! におけるクロスサイトスクリプティングの脆弱性 Joomla! は、アーカイブセクションに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-4779 28134 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004364.html  View