Search vulnerabilities

Results 2

Export CSV
CVE-2009-3834

SQL injection vulnerability in the Photoblog (com_photoblog) component alpha 3 and alpha 3a for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in a blogs action to index.php.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
CVE-2010-0610

Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the blog parameter in an images action to index.php. NOTE: a separate vector for the id parameter to detail.php may also exist.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed