CVE-2015-7714
HighSummary
Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before version 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via various parameters in administrator/index.php.
Risk Assessment
An attacker could gain access to the database, potentially leading to the disclosure of sensitive information or data modification. This poses a serious threat to the integrity and confidentiality of data within the organization.
Recommendation
It is recommended to update the Realtyna RPL component to version 8.9.5 or later to eliminate these vulnerabilities. Additionally, conducting a security audit of the application to identify other potential flaws is advisable.
Other vulnerabilities in Realtyna RPL (com_rpl)
Original NVD description (English source)
Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via the (1) id, (2) copy_field in a data_copy action, (3) pshow in an update_field action, (4) css, (5) tip, (6) cat_id, (7) text_search, (8) plisting, or (9) pwizard parameter to administrator/index.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS