Description

SQL injection vulnerability in the Ice Gallery (com_ice) component 0.5 beta 2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.

Remediation

References

CVE-2008-6852

Related Vulnerabilities

PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11074)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11026)

WordPress Plugin 2 Click Social Media Buttons 'xing-url' Parameter Cross-Site Scripting (0.32.2)

Tornado Improper Input Validation Vulnerability (CVE-2012-2374)

Craft CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-3814)

Severity

High

Classification

CVE-2008-6852 CWE-138

Tags

Missing Update Known Vulnerabilities