CVE-2011-5099

HIGH 7.5CVE-2011-5099 · Published 14/08/2012 · updated 16/06/2026

In short

CVE-2011-5099 is a HIGH (CVSS 7.5) vulnerability affecting mod ccnewsletter (chillcreations).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mod ccnewsletter chillcreations	`= 1.0.7= 1.0.8= 1.0.9`	No fix yet

Description

SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.

References

packetstormsecurity.org/files/112092/Joomla-CCNewsLetter-1.0.7-SQL-Injection.html · Exploit
secunia.com/advisories/48934 · Vendor Advisory
chillcreations.com/blog/5-ccnewsletter-joomla-newsletter/274-ccnewsletter-1010-security-release.html
securityfocus.com/bid/53208 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/75112

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free