CVE-2012-1116

HIGH 7.5CVE-2012-1116 · Published 26/09/2012 · updated 16/06/2026

In short

CVE-2012-1116 is a HIGH (CVSS 7.5) vulnerability affecting joomla! (joomla).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
joomla! joomla	`= 1.7.0= 1.7.1= 1.7.2= 1.7.3= 1.7.4= 1.7.5= 2.5.0= 2.5.1`	No fix yet

Description

SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

developer.joomla.org/security/news/391-20120301-core-sql-injection.html · Vendor Advisory
secunia.com/advisories/48005 · Vendor Advisory
openwall.com/lists/oss-security/2012/03/06/12
openwall.com/lists/oss-security/2012/03/06/5
osvdb.org/79837
securityfocus.com/bid/52312
exchange.xforce.ibmcloud.com/vulnerabilities/73699

More vulnerabilities in joomla!

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

joomla!

joomla

= 1.7.0= 1.7.1= 1.7.2= 1.7.3= 1.7.4= 1.7.5= 2.5.0= 2.5.1

No fix yet

More vulnerabilities in joomla!

See all →