Joomla : Security Vulnerabilities Published In 2015 (Sql injection)
CVE-2015-7858
Public exploit exists
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7297.
Max Base Score | 7.5 |
Published | 2015-10-29 |
Updated | 2017-09-13 |
EPSS | 84.85% |
CVE-2015-7857
Public exploit exists
SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to execute arbitrary SQL commands via the list[select] parameter to index.php.
Max Base Score | 7.5 |
Published | 2015-10-29 |
Updated | 2017-09-13 |
EPSS | 84.85% |
CVE-2015-7297
Public exploit exists
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858.
Max Base Score | 7.5 |
Published | 2015-10-29 |
Updated | 2017-09-13 |
EPSS | 97.56% |
SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent.
Max Base Score | 7.5 |
Published | 2015-06-18 |
Updated | 2016-12-07 |
EPSS | 0.16% |
4 vulnerabilities found