PT-2012-3088 · Open Source Matters · Joomla!

Colin Wong

·

CVE-2012-1116

·

Published

2012-09-26

·

Updated

2017-08-29

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Joomla! versions 1.7.x and 2.5.x before 2.5.2
Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands.
Recommendations For Joomla! versions 1.7.x, update to a version outside of the affected range. For Joomla! versions 2.5.x before 2.5.2, update to version 2.5.2 or later.

Exploit

Fix

RCE

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2012-1116

Affected Products

Joomla!