CVE-2009-4598

ALTO 7.5CVE-2009-4598 · Published 12/01/2010 · updated 16/06/2026

In breve

CVE-2009-4598 è una vulnerabilità ALTO (CVSS 7.5) che riguarda com jphoto (corephp).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
com jphoto corephp	`= 1.0`	No fix yet

Description

SQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action to index.php.

References

osvdb.org/60864
packetstormsecurity.org/0912-exploits/joomlajphoto-sql.txt · Exploit
secunia.com/advisories/37676 · Vendor Advisory
exploit-db.com/exploits/10367 · Exploit
securityfocus.com/bid/37279
exchange.xforce.ibmcloud.com/vulnerabilities/54664

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free