PT-2020-7095 · Joomla · Joomla!

Aung Khant · Published 2020-02-05 · Updated 2020-02-07 · CVE-2011-1151

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Joomla! version 1.6.0

Description The issue is related to SQL Injection via the filter order and filer order Dir parameters. This allows for potential exploitation.

Recommendations For Joomla! version 1.6.0, consider restricting access to the parameters filter order and filer order Dir to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2011-1151

Affected Products

Joomla!

References · 5

• 🔥 https://packetstormsecurity.com/files/101835/Joomla-1.6.0-SQL-Injection.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-1151 · Security Note
• https://t.me/cibsecurity/9640 · Telegram Post
• https://openwall.com/lists/oss-security/2011/03/14/21 · Note
• https://t.me/cvenotify/819 · Telegram Post