Description

Joomla! CMS versions 3.1.0 through 3.2.2 are vulnerable to an SQL injection vulnerability if the default data is selected during installation.

Remediation

Upgrade to the latest version of Joomla!.

References

[20140301] - Core - SQL Injection

Related Vulnerabilities

WordPress Plugin WP Forum Server 'edit_post_id' Parameter SQL Injection (1.7)

WordPress Plugin Tune Library SQL Injection (1.5.4)

WordPress Plugin wp-autosuggest SQL Injection (0.24)

WordPress Plugin Enable Media Replace SQL Injection and Arbitrary File Upload Vulnerabilities (2.3)

WordPress Plugin Party Hall Booking Manager SQL Injection (1.1)

Severity

High

Classification

CWE-89 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Tags

SQL Injection