CVE-2009-2239: SQL Injection
SQL injection vulnerability in the (1) casinobase (comcasinobase), (2) casinoblackjack (comcasinoblackjack), and (3) casinovideopoker (comcasinovideopoker) components 0.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2239?
CVE-2009-2239 is classified as a high severity SQL injection vulnerability.
How do I fix CVE-2009-2239?
To fix CVE-2009-2239, upgrade the affected components to their latest versions or implement input validation to sanitize the Itemid parameter.
Which Joomla! components are affected by CVE-2009-2239?
CVE-2009-2239 affects the components casinobase, casino_blackjack, and casino_videopoker version 0.3.1.
Can CVE-2009-2239 allow for remote code execution?
Yes, CVE-2009-2239 allows remote attackers to execute arbitrary SQL commands, which could lead to remote code execution under certain circumstances.
Is CVE-2009-2239 present in earlier versions of the affected components?
CVE-2009-2239 is specific to version 0.3.1 of the affected Joomla! components and may be present in earlier versions.