CVE-2005-3772

Published: Nov 23, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the (1) Itemid variable in the Polls modules and (2) multiple unspecified methods in the mosDBTable class.

Affected (4)

Products: Joomla: Joomla

Joomla

1 product

Joomla

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla	Version 1.0.1
Joomla Joomla	Version 1.0.2
Joomla Joomla	Version 1.0.3
Joomla Joomla	Version 1.0

References (16)

http://secunia.com/advisories/17675

Source: cve@mitre.org

PatchVendor Advisory

http://www.joomla.org/content/view/499/66/

Source: cve@mitre.org

http://www.osvdb.org/21042

Source: cve@mitre.org

http://www.osvdb.org/21043

Source: cve@mitre.org

http://www.securityfocus.com/bid/15526

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2005/2526

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23177

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23178

Source: cve@mitre.org

http://secunia.com/advisories/17675