Unrated severityNVD Advisory· Published May 22, 2007· Updated Jun 16, 2026

CVE-2007-2792

Description

SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter to index.php. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Com Yanc/Com Yanc
cpe:2.3:a:com_yanc:com_yanc:1.4_beta:*:mambo:*:*:*:*:*
Mambo (software)/com_yancllm-create
Range: <1.5 beta 3
Joomla/com_yancllm-create
Range: <1.5 beta 3

Patches

Vulnerability mechanics

References

osvdb.org/37948nvd
osvdb.org/62620nvd
packetstormsecurity.org/0806-exploits/joomlayanc-sql.txtnvd
secunia.com/advisories/38780nvd
www.exploit-db.com/exploits/11603nvd
www.securityfocus.com/bid/24030nvd
www.securityfocus.com/bid/38454nvd
exchange.xforce.ibmcloud.com/vulnerabilities/56585nvd
www.exploit-db.com/exploits/3944nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000