Vulnerability in Joomla

CVE-2007-0374

SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing.

EPSS: 0.012 (65.4th percentile) — read the EPSS interpretation.

Affected products

Joomla — versions 1.0.11, 1.5.0_beta
Mambo — versions 4.6.1
N/a — versions n/a

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, Patch, x_refsource_FULLDISC)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)