CVE-2009-2395 - SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php

Back Back to CVE browser

HIGH

SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php

Published Jul 9, 2009

7.5

HIGH

CVSS 2.0

EPSS 3.03%

Description

SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://www.exploit-db.com/exploits/9030
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/35517
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/1733
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2391
Advisory

Link	Providers	Tags
http://www.exploit-db.com/exploits/9030		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/35517		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/1733		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2391		Advisory