Description (CNA)
SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://osvdb.org/32520
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html
- http://www.securityfocus.com/bid/19734
- http://www.securityfocus.com/archive/1/459203/100/0/threaded
- http://www.hackers.ir/advisories/festival.txt
ADP enrichment
No English description supplied.