Description

Joomla! 1.6.0 is vulnerable to an SQL Injection vulnerability. Parameters (filter_order, filer_order_Dir) were not properly sanitized, leading to an SQL Injection vulnerability. This could an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

Remediation

Upgrade to Joomla! 1.6.1 or higher.

References

Joomla! 1.6.0 SQL Injection Vulnerability

Joomla 1.6.0 Analysis and Exploitation

Related Vulnerabilities

Envoy Proxy Use After Free Vulnerability (CVE-2021-43825)

MySQL CVE-2021-2020 Vulnerability (CVE-2021-2020)

Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-13402)

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7365)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3757)

Severity

High

Classification

CVE-2011-1151 CWE-89 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

Known Vulnerabilities SQL Injection