CVE-2007-6272: SQL Injection
Multiple SQL injection vulnerabilities in index.php in Joomla! 1.5 RC3 allow remote attackers to execute arbitrary SQL commands via (1) the view parameter to the comcontent component, (2) the task parameter to the comsearch component, or (3) the option parameter in a search action to the comsearch component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6272?
CVE-2007-6272 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2007-6272?
To fix CVE-2007-6272, upgrade your Joomla installation to a version later than 1.5 RC3 that has patched these SQL injection vulnerabilities.
What are the affected components in CVE-2007-6272?
The affected components in CVE-2007-6272 include com_content, com_search, and potentially others within Joomla 1.5 RC3.
Can exploit CVE-2007-6272 lead to data compromise?
Yes, exploiting CVE-2007-6272 can lead to serious data compromise by allowing attackers to manipulate the database.
Is CVE-2007-6272 specific to Joomla 1.5 RC3?
Yes, CVE-2007-6272 specifically affects Joomla version 1.5 RC3, making it critical for users of this version to upgrade.