PT-2005-4525 · Joomla · Joomla!

Publicado 2005-11-23 · Atualizado 2017-07-11 · CVE-2005-3772

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.0.4

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the Itemid variable in the Polls modules and multiple unspecified methods in the mosDBTable class.

Recommendations For versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Polls modules and limiting the use of the mosDBTable class until a patch is applied. Avoid using the Itemid variable in affected modules until the issue is resolved.

Correção

Identificadores relacionados

CVE-2005-3772

Produtos afetados

Joomla!

Referências · 10

• http://vupen.com/english/advisories/2005/2526 · Nota
• http://joomla.org/content/view/499/66 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3772 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3772 · Nota de Segurança
• http://secunia.com/advisories/17675 · Aviso do Fabricante
• http://osvdb.org/21042 · Nota
• http://securityfocus.com/bid/15526 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23178 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23177 · Nota
• http://osvdb.org/21043 · Nota