Description

Joomla! CMS versions 3.1.0 through 3.2.2 are vulnerable to an SQL injection vulnerability if the default data is selected during installation.

Remediation

Upgrade to the latest version of Joomla!.

References

[20140301] - Core - SQL Injection

Related Vulnerabilities

WordPress 4.2.x Possible SQL Injection Vulnerability (4.2 - 4.2.16)

WordPress Plugin WP-RecentComments SQL Injection (2.0.7)

WordPress Plugin WP Symposium SQL Injection (15.5.1)

WordPress Plugin Users Ultra SQL Injection (1.4.35)

WordPress Plugin Form Vibes-Database Manager for Forms SQL Injection (1.4.10)

Severity

High

Classification

CWE-89 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

SQL Injection