SQL Injection in Almondsoft Com Aclassf

CVE-2009-3154

SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manw_repl add_form action to index.php, a different vector than CVE-2009-2567.

Vulnerability class: SQL Injection

EPSS: 0.009 (56.9th percentile) — read the EPSS interpretation.

Affected products

Almondsoft Com_aclassf — versions 7.5
Joomla
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)