CVE-2015-8769: SQL Injection
Published Jan 12, 2016
·Updated
SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
29 affected components
Joomla Joomla\!=3.0.0
Joomla Joomla\!=3.0.1
Joomla Joomla\!=3.0.2
Joomla Joomla\!=3.0.3
Joomla Joomla\!=3.0.4
Joomla Joomla\!=3.1.0
Joomla Joomla\!=3.1.1
Joomla Joomla\!=3.1.2
Joomla Joomla\!=3.1.3
Joomla Joomla\!=3.1.4
Joomla Joomla\!=3.1.5
Joomla Joomla\!=3.1.6
Joomla Joomla\!=3.2.0
Joomla Joomla\!=3.2.1
Joomla Joomla\!=3.2.2
Joomla Joomla\!=3.2.3
Joomla Joomla\!=3.2.4
Joomla Joomla\!=3.3.0
Joomla Joomla\!=3.3.1
Joomla Joomla\!=3.3.2
Joomla Joomla\!=3.3.3
Joomla Joomla\!=3.3.4
Joomla Joomla\!=3.4.0
Joomla Joomla\!=3.4.1
Joomla Joomla\!=3.4.2
Joomla Joomla\!=3.4.3
Joomla Joomla\!=3.4.4
Joomla Joomla\!=3.4.5
Joomla Joomla\!=3.4.6
Event History
Jan 12, 2016
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8769?
CVE-2015-8769 has a severity rating of high due to its potential to allow attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2015-8769?
To fix CVE-2015-8769, upgrade Joomla! to version 3.4.7 or later, which includes patches for this vulnerability.
3
What versions of Joomla! are affected by CVE-2015-8769?
CVE-2015-8769 affects Joomla! versions before 3.4.7, including versions 3.0.0 through 3.4.6.
4
What type of vulnerability is CVE-2015-8769?
CVE-2015-8769 is classified as an SQL injection vulnerability.
5
Can CVE-2015-8769 be exploited remotely?
Yes, CVE-2015-8769 can be exploited remotely if an attacker sends malicious SQL queries to the vulnerable Joomla! instance.