CVE-2006-1049

Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via unknown attack vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*

History

21 Nov 2024, 00:07

Type Values Removed Values Added
References () http://secunia.com/advisories/19105 - Patch, Vendor Advisory () http://secunia.com/advisories/19105 - Patch, Vendor Advisory
References () http://www.joomla.org/content/view/938/78/ - () http://www.joomla.org/content/view/938/78/ -
References () http://www.osvdb.org/23819 - () http://www.osvdb.org/23819 -
References () http://www.vupen.com/english/advisories/2006/0818 - Vendor Advisory () http://www.vupen.com/english/advisories/2006/0818 - Vendor Advisory

Information

Published : 2006-03-07 11:02

Updated : 2024-11-21 00:07


NVD link : CVE-2006-1049

Mitre link : CVE-2006-1049

CVE.ORG link : CVE-2006-1049


JSON object : View

Products Affected

joomla

  • joomla
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')