CVE Vulnerabilities

CVE-2005-3772

Published: Nov 23, 2005 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the (1) Itemid variable in the Polls modules and (2) multiple unspecified methods in the mosDBTable class.

Affected Software 

Name Vendor Start Version End Version
Joomla Joomla 1.0 (including) 1.0 (including)
Joomla Joomla 1.0.1 (including) 1.0.1 (including)
Joomla Joomla 1.0.2 (including) 1.0.2 (including)
Joomla Joomla 1.0.3 (including) 1.0.3 (including)

References