CVE-2009-0379: SQL Injection
Published Feb 2, 2009
·Updated
SQL injection vulnerability in the Prince Clan Chess Club (compcchess) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a showgame action to index.php, a different vector than CVE-2008-0761.
Affected Software
4 affected components
Joomla Com Pcchess
Joomla joomla
All of the following
Joomla Com Pcchess
Joomla joomla
Event History
Feb 2, 2009
CVE Published
via MITRE·06:33 PM
Data Sourced
via MITRE·06:33 PM
Description
Data Sourced
07:00 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·07:00 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0379?
CVE-2009-0379 is classified as a medium severity SQL injection vulnerability.
2
How do I fix CVE-2009-0379?
To fix CVE-2009-0379, update the com_pcchess component for Joomla! to the latest version available.
3
What systems are affected by CVE-2009-0379?
CVE-2009-0379 affects the Prince Clan Chess Club component specifically in Joomla! installations.
4
Can CVE-2009-0379 be exploited remotely?
Yes, CVE-2009-0379 can be exploited remotely by attackers to execute arbitrary SQL commands.
5
What parameters are involved in CVE-2009-0379?
The game_id parameter in the showgame action to index.php is involved in CVE-2009-0379.