CVE-2009-3325 - SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the stype parameter in an editsurvey action to index.php

Back Back to CVE browser

HIGH

SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the stype parameter in an editsurvey action to index.php

Published Sep 23, 2009

7.5

HIGH

CVSS 2.0

EPSS 0.96%

Description

SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the stype parameter in an editsurvey action to index.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://www.exploit-db.com/exploits/9721
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/36464
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/2705
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3307
Advisory

Link	Providers	Tags
http://www.exploit-db.com/exploits/9721		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/36464		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/2705		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3307		Advisory