Description

SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing.

Remediation

References

CVE-2007-0374

Related Vulnerabilities

Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.15)

Oracle Database Server CVE-2007-3858 Vulnerability (CVE-2007-3858)

Open Resty Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-11724)

WordPress Plugin WP Selected Text Sharer Multiple Vulnerabilities (1.0)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12649)

Severity

High

Classification

CVE-2007-0374

Tags

Missing Update Known Vulnerabilities