CVE-2015-7714
CVE-2015-7714
Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via the (1) id, (2) copy_field in a data_copy action, (3) pshow in an update_field action, (4) css, (5) tip, (6) cat_id, (7) text_search, (8) plisting, or (9) pwizard parameter to administrator/index.php.
Affected products
n/a · n/apublic PoCs found — 3
cve_referencepacketstormsecurity.com/files/134066/Realtyna-RPL-8.9.2-SQL-Injection.htmlunverifiedcve_referencewww.exploit-db.com/exploits/38527/unverifiedexploitdbwww.exploit-db.com/exploits/38527unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →