CVE-2014-4960 Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery (com_youtubegallery) component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitr...
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery (com_youtubegallery) component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) listid or (2) themeid parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomlaboat com youtubegallery | = 3.9.0 | No fix listed |
| joomlaboat com youtubegallery | = 3.9.2 | No fix listed |
| joomlaboat com youtubegallery | = 3.9.3 | No fix listed |
| joomlaboat com youtubegallery | = 3.9.4 | No fix listed |
| joomlaboat com youtubegallery | = 3.9.5 | No fix listed |
| joomlaboat com youtubegallery | = 3.9.6 | No fix listed |
| joomlaboat com youtubegallery | = 3.9.7 | No fix listed |
| joomlaboat com youtubegallery | = 3.9.8 | No fix listed |
| joomlaboat com youtubegallery | = 3.9.9 | No fix listed |
| joomlaboat com youtubegallery | = 4.0.0 | No fix listed |
| joomlaboat com youtubegallery | = 4.0.1 | No fix listed |
| joomlaboat com youtubegallery | = 4.0.2 | No fix listed |
| joomlaboat com youtubegallery | = 4.0.8 | No fix listed |
| joomlaboat com youtubegallery | = 4.0.9 | No fix listed |
| joomlaboat com youtubegallery | = 4.1.0 | No fix listed |
| joomlaboat com youtubegallery | = 4.1.1 | No fix listed |
| joomlaboat com youtubegallery | = 4.1.2 | No fix listed |
| joomlaboat com youtubegallery | = 4.1.3 | No fix listed |
| joomlaboat com youtubegallery | = 4.1.4 | No fix listed |
| joomlaboat com youtubegallery | = 4.1.5 | No fix listed |
| joomlaboat com youtubegallery | = 4.1.6 | No fix listed |
| joomlaboat com youtubegallery | = 4.1.7 | No fix listed |
References
- packetstormsecurity.com exploit
- 34087 exploit
- 68676 vdb-entry