CVE-2009-2099: SQL Injection
Published Jun 17, 2009
·Updated
SQL injection vulnerability in the iJoomla RSS Feeder (comijoomlarss) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php.
Affected Software
2 affected components
Joomla joomla
iJoomla Com Rssfeeder
Event History
Jun 17, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
05:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-2099?
CVE-2009-2099 has been classified as a medium severity SQL injection vulnerability.
2
How do I fix CVE-2009-2099?
To fix CVE-2009-2099, you should update the iJoomla RSS Feeder component to the latest version that addresses this vulnerability.
3
What types of attacks can exploit CVE-2009-2099?
CVE-2009-2099 can be exploited to perform arbitrary SQL queries against the database.
4
Which systems are vulnerable to CVE-2009-2099?
CVE-2009-2099 affects Joomla! systems that have the iJoomla RSS Feeder component installed.
5
Is CVE-2009-2099 still a concern for current Joomla! sites?
CVE-2009-2099 remains a concern for Joomla! sites using outdated versions of the iJoomla RSS Feeder component.