CVE-2008-2692
Published Jun 13, 2008
Last updated 7 years ago
Overview
- Description
- SQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the ArticleID parameter in a comment action to index.php.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-89
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13BCE75F-12CD-471C-81A5-DF67EA6DD3FF"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5EFA32C-F00E-4A5F-A1B9-3F4AD39A7399"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E88F359-F491-4AB6-AF47-0E46E6A780AD"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5882E4CC-CDEB-4CC7-A85F-9119D260FEED"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F23AD3A6-6BF2-46C6-ACEC-CDA49D467EC3"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59B6C666-679C-47CB-8035-21B01CFEFEC5"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "388062DA-B1DE-4CA2-BE1B-0B89E72F2721"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F87FDF2-93C5-458D-BE35-69646D522197"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31DD99E5-CDF3-427F-954C-A290055EACB9"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03FFF7F8-4D1B-4064-A3BD-6AEE67870EB5"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80FC39DC-895C-4323-A558-F75C6AA5AA38"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4AACF7E-A591-4CD6-961E-0D042CBD124B"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96672749-2BC3-45EE-8193-4FC9CF0FAAE0"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A25A129-BB92-4AA6-9247-B927CF0D45FD"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7EA0328-DC61-4CAB-B8D3-DDCEEE299D0E"
},
{
"criteria": "cpe:2.3:a:joomla:com_yvcomment:1.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86F7D9DC-A3AF-40C4-B2F1-AA5C3593E44B"
}
],
"operator": "OR"
}
]
}
]