Unscored CVE-2007-4184 EUVD-2007-4168GHSA-vc49-v673-rrjp

SQL injection vulnerability in administrator/popups/pollwindow.php in Joomla! 1.0.12 allows remote attackers to execute arbitrary SQL comma…

Published Aug 8, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in administrator/popups/pollwindow.php in Joomla! 1.0.12 allows remote attackers to execute arbitrary SQL commands via the pollid parameter.

References

20070729 security@soqor.net mailing-list
20070926 Re: Joomla multiple vulerabilities (1.0.X >= ) mailing-list
20070926 Joomla multiple vulerabilities (1.0.X >= ) mailing-list
20070927 Re: Joomla multiple vulerabilities (1.0.X >= ) mailing-list