CVE-2009-2395

HIGH 7.5CVE-2009-2395 · Published 09/07/2009 · updated 16/06/2026

In short

CVE-2009-2395 is a HIGH (CVSS 7.5) vulnerability affecting com k2 (joomlaworks).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
com k2 joomlaworks	`≤ 1.0.1`	No fix yet

Description

SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php.

References

exploit-db.com/exploits/9030
securityfocus.com/bid/35517 · Exploit
vupen.com/english/advisories/2009/1733 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free