PT-2012-5620

CVE-2012-4868

·

Published

2012-09-06

·

Updated

2012-09-07

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Kunena component version 1.7.2 for Joomla!
Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the news.php file. This can lead to unauthorized access and manipulation of database content.
Recommendations For Kunena component version 1.7.2, update to a newer version that contains a fix for this issue to prevent SQL injection attacks.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2012-4868
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com