Description

SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing.

Remediation

References

CVE-2007-0374

Related Vulnerabilities

WordPress Plugin Easy PayPal Events Cross-Site Scripting (1.1.1)

Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-7912)

WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability (2.2.46)

WordPress Ultimate Member Plugin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-3966)

Envoy Proxy Improper Input Validation Vulnerability (CVE-2019-9900)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2007-0374