CVE-2015-7858

High

Published: 29/10/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

This vulnerability may lead to unauthorized access to the database and exposure of sensitive information, posing a serious threat to organizational security.

Recommendation

It is recommended to update Joomla! to version 3.4.4 or later to mitigate this vulnerability.

Other vulnerabilities in Joomla! 3.2 before 3.4.4

CVE-2015-7857High
In Joomla! 3.2 before version 3.4.5, there is an SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php. This allows remote attackers to execute arbitrary SQL commands via the list[select] parameter to index.php.

Original NVD description (English source)

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7297.