CVE-2009-4057

EPSS 1.0%

SQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.packetstormsecurity.org/0911-exploits/joomlanexus-sql.txtunverified exploitdbwww.exploit-db.com/exploits/10177unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/60308 http://secunia.com/advisories/37408 https://exchange.xforce.ibmcloud.com/vulnerabilities/54325 http://www.packetstormsecurity.org/0911-exploits/joomlanexus-sql.txt http://www.securityfocus.com/bid/37050