Description

Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the (1) Itemid variable in the Polls modules and (2) multiple unspecified methods in the mosDBTable class.

Remediation

References

CVE-2005-3772

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33339)

WordPress Plugin Booster Elite for WooCommerce Multiple Cross-Site Request Forgery Vulnerabilities (6.0.0)

Java Unspesificed Vulnerability (CVE-2018-3149)

WordPress Plugin Image Gallery-Responsive Photo Gallery SQL Injection (1.8.9)

WordPress Plugin VikBooking Hotel Booking Engine & PMS Multiple Vulnerabilities (1.5.7)

Severity

High

Classification

CVE-2005-3772

Tags

Missing Update Known Vulnerabilities