Description

Joomla! CMS versions 3.1.0 through 3.2.2 are vulnerable to an SQL injection vulnerability if the default data is selected during installation.

Remediation

Upgrade to the latest version of Joomla!.

References

[20140301] - Core - SQL Injection

Related Vulnerabilities

WordPress Plugin Easy Modal Multiple SQL Injection Vulnerabilities (2.0.17)

WordPress Plugin Web Directory Free SQL Injection (1.6.9)

WordPress Plugin WP Yelp Review Slider SQL Injection (7.0)

WordPress Plugin Content Timeline Multiple SQL Injection Vulnerabilities (4.4.2)

WordPress Plugin Good LMS-Learning Management System SQL Injection (2.1.4)

Severity

High

Classification

CWE-89 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

SQL Injection