CVE-2007-0373: joomla joomla\!
Vulnerability summary
CVE-2007-0373 is a medium (CVSS 6.8) vulnerability in joomla joomla\!. EPSS estimates a 12.30% chance of exploitation in the next 30 days, higher than 96.1% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 19-01-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands via (1) the searchword parameter in certain files; the where parameter in (2) plugins/search/content.php or (3) plugins/search/weblinks.php; the text parameter in (4) plugins/search/contacts.php, (5) plugins/search/categories.php, or (6) plugins/search/sections.php; or (7) the email parameter in database/table/user.php, which is not properly handled by the check function.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
12.30%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
+0.31 pp
From 12.00% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (archives.neohapsis.com)
Maturity: unknown
Exploit Reference (hackers.ir)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Joomla1 product
- joomla\!1.5.0_beta
1 vendor · 1 product
References
11 links- archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlMailing ListX Refsource FULLDISCExploit