CVE-2009-0377: SQL Injection
SQL injection vulnerability in the beamospetition (combeamospetition) 1.0.12 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mpid parameter in a sign action to index.php, a different vector than CVE-2008-3132.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0377?
CVE-2009-0377 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2009-0377?
To fix CVE-2009-0377, update the beamospetition component to a version that is not affected, or apply any available security patches provided by Joomla.
What systems are affected by CVE-2009-0377?
CVE-2009-0377 affects version 1.0.12 of the beamospetition component for Joomla!
What type of attack is CVE-2009-0377 vulnerable to?
CVE-2009-0377 is vulnerable to SQL injection attacks which can lead to data breaches and unauthorized access.
Is CVE-2009-0377 still a risk for Joomla sites?
Yes, if Joomla sites are still running the vulnerable version of the beamospetition component, they remain at risk from CVE-2009-0377.