CVE-2009-1258: SQL Injection

Published Apr 7, 2009

Updated

SQL injection vulnerability in the RD-Autos (comrdautos) component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

2 affected components

Rd-media Com Rdautos=1.5.7

Joomla joomla

Event History

Apr 7, 2009

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Data Sourced

11:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-1258?

CVE-2009-1258 is classified as a high severity vulnerability due to its ability to allow remote attackers to execute arbitrary SQL commands.

How do I fix CVE-2009-1258?

To fix CVE-2009-1258, you should upgrade to a secure version of the RD-Autos component that addresses the SQL injection vulnerability.

Who is affected by CVE-2009-1258?

CVE-2009-1258 affects users of the RD-Autos component version 1.5.7 installed on Joomla! websites.

What type of vulnerability is CVE-2009-1258?

CVE-2009-1258 is an SQL injection vulnerability that allows attackers to manipulate database queries.

Can CVE-2009-1258 be exploited remotely?

Yes, CVE-2009-1258 can be exploited remotely by attackers who send specially crafted requests to the affected Joomla! installation.