CVE

Id
28135  
CVE No.
CVE-2007-4778  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in the content component (com_content) in Joomla! 1.5 Beta1, Beta2, and RC1 allow remote attackers to execute arbitrary SQL commands via the filter parameter in an archive action to (1) archive.php, (2) category.php, or (3) section.php in models/. NOTE: this may be the same as CVE-2007-4777.  
Phase
Assigned (20070910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
291826 28135 CVE-2007-4778 MISC:http://downloads.securityfocus.com/vulnerabilities/exploits/25508.php  View
291827 28135 CVE-2007-4778 MISC:http://www.joomla.org/content/view/3831/1/  View
291828 28135 CVE-2007-4778 BID:25508  View
291829 28135 CVE-2007-4778 URL:http://www.securityfocus.com/bid/25508  View
291830 28135 CVE-2007-4778 OSVDB:39070  View
291831 28135 CVE-2007-4778 URL:http://osvdb.org/39070  View
291832 28135 CVE-2007-4778 OSVDB:39071  View
291833 28135 CVE-2007-4778 URL:http://osvdb.org/39071  View
291834 28135 CVE-2007-4778 OSVDB:39072  View
291835 28135 CVE-2007-4778 URL:http://osvdb.org/39072  View
291836 28135 CVE-2007-4778 XF:joomla-filter-sql-injection(36423)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55673 JVNDB-2007-004365 Joomla! における重要な情報を取得される脆弱性 Joomla! には、重要な情報 (フルパス) を取得される脆弱性が存在します。 CVE-2007-4780 28135 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004365.html  View