SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Joomla | Joomla | 1.0.11 (including) | 1.0.11 (including) |
| Joomla | Joomla | 1.5.0_beta (including) | 1.5.0_beta (including) |
| Mambo | Mambo | 4.6.1 (including) | 4.6.1 (including) |
References
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html
- http://osvdb.org/32520
- http://www.hackers.ir/advisories/festival.txt
- http://www.securityfocus.com/archive/1/459203/100/0/threaded
- http://www.securityfocus.com/bid/19734
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html
- http://osvdb.org/32520
- http://www.hackers.ir/advisories/festival.txt
- http://www.securityfocus.com/archive/1/459203/100/0/threaded
- http://www.securityfocus.com/bid/19734