CVE-2015-7714: SQL Injection
Multiple SQL injection vulnerabilities in the Realtyna RPL (comrpl) component before 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via the (1) id, (2) copyfield in a datacopy action, (3) pshow in an updatefield action, (4) css, (5) tip, (6) catid, (7) textsearch, (8) plisting, or (9) pwizard parameter to administrator/index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7714?
CVE-2015-7714 has been classified as a critical vulnerability due to its potential to allow remote administrators to execute arbitrary SQL commands.
How do I fix CVE-2015-7714?
To mitigate CVE-2015-7714, upgrade the Realtyna Property Listing component to version 8.9.5 or later.
What are the affected versions for CVE-2015-7714?
CVE-2015-7714 affects Realtyna Property Listing Joomla! components prior to version 8.9.5.
Can CVE-2015-7714 be exploited by non-administrators?
CVE-2015-7714 is mainly exploitable by remote administrators who have access to the affected component.
What kind of attacks are possible with CVE-2015-7714?
CVE-2015-7714 can lead to SQL injection attacks, allowing attackers to manipulate database queries and execute arbitrary SQL commands.