CVE-2009-0421: SQL Injection
Published Feb 5, 2009
·Updated
SQL injection vulnerability in the Eventing (comeventing) 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
Affected Software
14 affected components
Joomla Com Eventing=1.6
Joomla Com Eventing=1.6.1
Joomla Com Eventing=1.6.2
Joomla Com Eventing=1.6.3
Joomla Com Eventing=1.6.4
Joomla Com Eventing=1.6.5
Joomla joomla
All of the following
Any of the following
Joomla Com Eventing=1.6
Joomla Com Eventing=1.6.1
Joomla Com Eventing=1.6.2
Joomla Com Eventing=1.6.3
Joomla Com Eventing=1.6.4
Joomla Com Eventing=1.6.5
Joomla joomla
Event History
Feb 5, 2009
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
12:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·12:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0421?
CVE-2009-0421 is classified as a high severity vulnerability due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2009-0421?
To fix CVE-2009-0421, you should update the Eventing component to the latest version that is available for Joomla!
3
Which versions of Joomla! are affected by CVE-2009-0421?
CVE-2009-0421 affects Joomla! Eventing component version 1.6.x, including versions 1.6 to 1.6.5.
4
What type of vulnerability is CVE-2009-0421?
CVE-2009-0421 is an SQL injection vulnerability, allowing attackers to execute arbitrary SQL commands.
5
Can CVE-2009-0421 be exploited without authentication?
Yes, CVE-2009-0421 can be exploited remotely without authentication, making it particularly dangerous.