CVE-2015-7857
HighSummary
In Joomla! 3.2 before version 3.4.5, there is an SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php. This allows remote attackers to execute arbitrary SQL commands via the list[select] parameter to index.php.
Risk Assessment
This vulnerability could lead to unauthorized access to the database and leakage of sensitive information, posing a serious threat to the organization's security.
Recommendation
It is recommended to update Joomla! to version 3.4.5 or later to mitigate this vulnerability and to conduct a security audit of the application.
Other vulnerabilities in Joomla! 3.2 before 3.4.5
Original NVD description (English source)
SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to execute arbitrary SQL commands via the list[select] parameter to index.php.