SQL injection vulnerability in the Kunena Forum (com_kunena) component 1.5.3 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the func parameter to index.php.
                
            References
                    | Link | Resource | 
|---|---|
| http://www.securityfocus.com/bid/36020 | Exploit | 
| http://secunia.com/advisories/36245 | Vendor Advisory | 
| http://www.exploit-db.com/exploits/9408 | 
Configurations
                    Configuration 1 (hide)
| AND | 
                                
                                
 
  | 
                        
Information
                Published : 2010-01-04 09:30
Updated : 2017-09-18 18:29
NVD link : CVE-2009-4550
Mitre link : CVE-2009-4550
JSON object : View
CWE
                
                    
                        
                        CWE-89
                        
            Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
                joomla
- joomla\!
 
kunena
- kunena_forum
 


