Description

Joomla! 1.6.0 is vulnerable to an SQL Injection vulnerability. Parameters (filter_order, filer_order_Dir) were not properly sanitized, leading to an SQL Injection vulnerability. This could an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

Remediation

Upgrade to Joomla! 1.6.1 or higher.

References

Joomla! 1.6.0 SQL Injection Vulnerability

Joomla 1.6.0 Analysis and Exploitation

Related Vulnerabilities

PHP Cryptographic Issues Vulnerability (CVE-2015-8867)

Oracle Database Server CVE-2008-2600 Vulnerability (CVE-2008-2600)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-3966)

PHP Other Vulnerability (CVE-2009-4143)

Apache HTTP Server Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-11985)

Severity

High

Classification

CVE-2011-1151 CWE-89 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

Known Vulnerabilities SQL Injection