CVE-2009-0706: SQL Injection
Published Feb 23, 2009
·Updated
SQL injection vulnerability in the Simple Review (comsimplereview) component 1.3.5 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php.
Affected Software
6 affected components
Simple-review Com Simple Review=1.3.5
Joomla joomla
Mambo Mambo
All of the following
Simple-review Com Simple Review=1.3.5
Any of the following
Joomla joomla
Mambo Mambo
Event History
Feb 23, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
03:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·03:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0706?
CVE-2009-0706 has a high severity rating due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2009-0706?
To fix CVE-2009-0706, upgrade to a patched version of the Simple Review component that addresses the SQL injection vulnerability.
3
What systems are affected by CVE-2009-0706?
CVE-2009-0706 specifically affects version 1.3.5 of the Simple Review component for Joomla! and Mambo.
4
What type of vulnerability is CVE-2009-0706?
CVE-2009-0706 is classified as an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
5
Who can exploit CVE-2009-0706?
CVE-2009-0706 can be exploited by remote attackers who manipulate the category parameter in index.php.