CVE-2009-3215: SQL Injection
Published Sep 16, 2009
·Updated
SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter.
Affected Software
39 affected components
Php-shop-system Ixxo Cart<=3.9.6.0
Php-shop-system Ixxo Cart
Joomla joomla=1.0
Joomla joomla=1.0.0
Joomla joomla=1.0.1
Joomla joomla=1.0.2
Joomla joomla=1.0.3
Joomla joomla=1.0.4
Joomla joomla=1.0.5
Joomla joomla=1.0.6
Joomla joomla=1.0.7
Joomla joomla=1.0.8
Joomla joomla=1.0.9
Joomla joomla=1.0.10
Joomla joomla=1.0.11
Joomla joomla=1.0.12
Joomla joomla=1.0.13
Joomla joomla=1.0.14
Joomla joomla=1.03
Joomla joomla=1.5
Joomla joomla=1.5-rc1
Joomla joomla=1.5-rc2
Joomla joomla=1.5-rc3
Joomla joomla=1.5.0-beta
Joomla joomla=1.5.0-beta1
Joomla joomla=1.5.0-beta2
Joomla joomla=1.5.0-rc1
Joomla joomla=1.5.1
Joomla joomla=1.5.2
Joomla joomla=1.5.3
Joomla joomla=1.5.4
Joomla joomla=1.5.5
Joomla joomla=1.5.6
Joomla joomla=1.5.7
Joomla joomla=1.5.8
Joomla joomla=1.5.9
Joomla joomla=1.5.10
Joomla joomla=1.5rc4
Joomla joomla=1.8.1
Remediation
Patch Available
Event History
Sep 16, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3215?
CVE-2009-3215 is considered a high severity vulnerability due to its potential for arbitrary SQL command execution.
2
How do I fix CVE-2009-3215?
To fix CVE-2009-3215, upgrade IXXO Cart Standalone to version 3.9.6.1 or later.
3
Which versions of IXXO Cart are affected by CVE-2009-3215?
IXXO Cart Standalone versions prior to 3.9.6.1 are affected by CVE-2009-3215.
4
Does CVE-2009-3215 affect Joomla?
Yes, CVE-2009-3215 affects the IXXO Cart component for Joomla! 1.0.x.
5
What attacks can be performed due to CVE-2009-3215?
Exploiting CVE-2009-3215 allows attackers to execute arbitrary SQL commands on the vulnerable systems.