CVE-2009-1848: SQL Injection

Published Jun 1, 2009

Updated

SQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or comagoragroup) component 0.3.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a groupdetail action to index.php.

Affected Software

2 affected components

JoomlaMe Com Agoragroup=0.3.5.3

Joomla joomla

Event History

Jun 1, 2009

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

07:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-1848?

CVE-2009-1848 is considered a high severity vulnerability due to its ability to allow SQL injection attacks.

How do I fix CVE-2009-1848?

To fix CVE-2009-1848, upgrade the JoomlaMe AgoraGroups component to a version that is not affected, ideally the latest version.

What software is affected by CVE-2009-1848?

CVE-2009-1848 specifically affects the JoomlaMe AgoraGroups component version 0.3.5.3.

Can CVE-2009-1848 lead to data breaches?

Yes, CVE-2009-1848 can potentially lead to data breaches by allowing attackers to execute arbitrary SQL commands.

Is there a known exploit for CVE-2009-1848?

Yes, there are known exploits for CVE-2009-1848 that demonstrate how SQL injection can be performed via the id parameter.