Vulnerabilities > CVE-2007-2933 - SQL-Injection vulnerability in Phil-A-Form 1.2.0.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
phil-a-form
exploit available
NVD
Published: 2007-05-31
Updated: 2017-10-11

Summary

SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the form_id parameter.

Vulnerable Configurations

Part Description Count
Application
Phil-A-Form
1

Exploit-Db

descriptionJoomla Component Phil-a-Form <= 1.2.0.0 SQL Injection Exploit. CVE-2007-2933. Webapps exploit for php platform
fileexploits/php/webapps/4003.sh
idEDB-ID:4003
last seen2016-01-31
modified2007-05-28
platformphp
port
published2007-05-28
reporterCypherXero
sourcehttps://www.exploit-db.com/download/4003/
titleJoomla Component Phil-a-Form <= 1.2.0.0 - SQL Injection Exploit
typewebapps

References