VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 10, 2007· Updated Jun 16, 2026

CVE-2007-4778

CVE-2007-4778

Description

Multiple SQL injection vulnerabilities in the content component (com_content) in Joomla! 1.5 Beta1, Beta2, and RC1 allow remote attackers to execute arbitrary SQL commands via the filter parameter in an archive action to (1) archive.php, (2) category.php, or (3) section.php in models/. NOTE: this may be the same as CVE-2007-4777.

Affected products

5
  • Joomla/Joomla!4 versions
    cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:*
    • (no CPE)range: 1.5 Beta1, Beta2, RC1
  • Joomla/Com Contentllm-fuzzy
    Range: 1.5 Beta1, Beta2, RC1

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.