CVE-2009-3434: SQL Injection
SQL injection vulnerability in the Tupinambis (comtupinambis) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the proyecto parameter in a verproyecto action to index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3434?
CVE-2009-3434 has a medium severity rating due to its potential for remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2009-3434?
To fix CVE-2009-3434, update the Tupinambis component to a version that is patched against this SQL injection vulnerability.
What software is affected by CVE-2009-3434?
CVE-2009-3434 affects the Tupinambis component version 1.0 used in Mambo and Joomla! platforms.
What type of vulnerability is CVE-2009-3434?
CVE-2009-3434 is an SQL injection vulnerability that allows for the execution of arbitrary SQL commands.
Can CVE-2009-3434 be exploited remotely?
Yes, CVE-2009-3434 can be exploited remotely by attackers through the proyecto parameter in specific actions.