Vulnerabilities > CVE-2007-4046 - SQL Injection vulnerability in Joomla Pony Gallery Component

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
joomla
exploit available
NVD
Published: 2007-07-27
Updated: 2017-09-29

Summary

SQL injection vulnerability in index.php in the Pony Gallery (com_ponygallery) 1.5 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.

Vulnerable Configurations

Part Description Count
Application
Joomla
1

Exploit-Db

descriptionJoomla Component Pony Gallery <= 1.5 SQL Injection Vulnerability. CVE-2007-4046. Webapps exploit for php platform
fileexploits/php/webapps/4201.txt
idEDB-ID:4201
last seen2016-01-31
modified2007-07-19
platformphp
port
published2007-07-19
reporterajann
sourcehttps://www.exploit-db.com/download/4201/
titleJoomla Component Pony Gallery <= 1.5 - SQL Injection Vulnerability
typewebapps

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/151622/joomlajoomgallery322pg251-sqldisclose.txt
idPACKETSTORM:151622
last seen2019-02-13
published2019-02-12
reporterKingSkrupellos
sourcehttps://packetstormsecurity.com/files/151622/Joomla-JoomGallery-3.2.2-PonyGallery-2.5.1-Database-Disclosure-SQL-Injection.html
titleJoomla JoomGallery 3.2.2 / PonyGallery 2.5.1 Database Disclosure / SQL Injection

References