CVE-2007-0373: SQL Injection

Published Jan 19, 2007

Updated

Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands via (1) the searchword parameter in certain files; the where parameter in (2) plugins/search/content.php or (3) plugins/search/weblinks.php; the text parameter in (4) plugins/search/contacts.php, (5) plugins/search/categories.php, or (6) plugins/search/sections.php; or (7) the email parameter in database/table/user.php, which is not properly handled by the check function.

Affected Software

1 affected component

Joomla joomla=1.5.0_beta

Event History

Jan 19, 2007

CVE Published

11:28 PM

Jan 20, 2007

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0373?

CVE-2007-0373 is classified as a high severity vulnerability due to its potential for remote SQL injection attacks.

How do I fix CVE-2007-0373?

To fix CVE-2007-0373, upgrade Joomla! to a version 1.5.1 or later that is not affected by these SQL injection vulnerabilities.

What versions of Joomla! are affected by CVE-2007-0373?

CVE-2007-0373 affects Joomla! version 1.5.0 Beta.

What attacks can be executed through CVE-2007-0373?

Attackers can execute arbitrary SQL commands through the searchword or other parameters exploited in the affected plugins.

Who can exploit CVE-2007-0373?

CVE-2007-0373 can be exploited by remote attackers with access to the vulnerable Joomla! application.