CVE Vulnerabilities

CVE-2005-3772

Published: Nov 23, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the (1) Itemid variable in the Polls modules and (2) multiple unspecified methods in the mosDBTable class.

Affected Software

Name Vendor Start Version End Version
Joomla Joomla 1.0 (including) 1.0 (including)
Joomla Joomla 1.0.1 (including) 1.0.1 (including)
Joomla Joomla 1.0.2 (including) 1.0.2 (including)
Joomla Joomla 1.0.3 (including) 1.0.3 (including)

References