CVE-2006-7126: SQL Injection
Published Mar 6, 2007
·Updated
SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query string, possibly PHPSELF.
Affected Software
2 affected components
Joomla BSQ Sitestats=1.8.0
Joomla BSQ Sitestats=2.1.1
Remediation
Patch Available
Event History
Mar 6, 2007
CVE Published
01:19 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-7126?
CVE-2006-7126 is considered a high severity vulnerability due to the potential for remote SQL injection attacks.
2
How do I fix CVE-2006-7126?
To fix CVE-2006-7126, upgrade to a patched version of Joomla BSQ Sitestats that resolves the SQL injection issue.
3
What types of systems are affected by CVE-2006-7126?
CVE-2006-7126 affects Joomla BSQ Sitestats versions 1.8.0 and 2.2.1.
4
What could an attacker do with CVE-2006-7126?
An attacker exploiting CVE-2006-7126 could potentially execute arbitrary SQL commands on the affected system.
5
Is CVE-2006-7126 remotely exploitable?
Yes, CVE-2006-7126 is remotely exploitable, allowing attackers to target vulnerable Joomla installations over the Internet.