| Package | Affected versions | Patched versions |
|---|---|---|
| estateagent | = 0.1 | |
| mambo | = 4.5= 4.5.0.2= 4.5.1.3= 4.5.1_1.0.9= 4.5.1_beta= 4.5.1_beta2= 4.5.1a= 4.5.2= 4.5.2.1= 4.5.2.2= 4.5.2.3= 4.5.3h= 4.5.4= 4.5_1.0.0= 4.5_1.0.1= 4.5_1.0.2= 4.5_1.0.3_beta= 4.5_1.0.9 |
SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free