Joomla! Component Com_contenthistory SQLI

Description

SQL injection is a type of attack where malicious SQL queries are inserted into input data, allowing attackers to manipulate the database. Successful exploitation can lead to data theft, modification of database records, unauthorized access, and even control over the entire database management system (DBMS).

Recommendation

Upgrade Joomla! to the latest stable version.

References

• CVE-2015-7297
• CVE-2015-7857
• CVE-2015-7858
• CWE-20
• CWE-89
• Joomla!
• OWASP 2021-A3
• OWASP 2021-A6
• OWASP: ESAPI project
• OWASP: SQL Injection
• Wikipedia: Prepared statement

Related Issues

• Joomla! Component Advertisement Board 3.1.0 'catname' SQLI - CVE-2018-5982
• Joomla! Component Aist 2.0 'id' SQLI - CVE-2018-5993
• Joomla! Component AllVideos Reloaded 1.2.x 'divid' SQLI - CVE-2018-5990
• Joomla! Component CcNewsletter 2.x.x 'id' SQLI - CVE-2018-5989

Tags:

Joomla

SQLI

Injection

WASC-19

CVE-2015-7858

CVE-2015-7857

CVE-2015-7297

EDB-ID-38534

CWE-89

CWE-20

OWASP 2021-A3

OWASP 2017-A1

OWASP 2013-A1

OWASP 2010-A1

OWASP 2007-A2

OWASP 2021-A6

OWASP 2017-A9

CAPEC-66

CAPEC-310

ISO27001-A.14.2.5

PCI v3.2-6.5.1