Sql injection

2009-09-2312:08:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.5%

JSON

SQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a propertycpanel action to index.php.

CPENameOperatorVersion
com_jreservationeq1.0
com_jreservationeq1.5

CPE	Name	Operator	Version
	com_jreservation	eq	1.0
	com_jreservation	eq	1.5

References

osvdb.org/58176

secunia.com/advisories/36774

www.securityfocus.com/bid/36446

exchange.xforce.ibmcloud.com/vulnerabilities/53327

www.exploit-db.com/exploits/9713