Skip to content

CVE-2015-2798 SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CriticalCVSS 9.8 EPSS 3.3% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

ProductAffected versionsFixed in
web-dorado contact form maker = 1.0.1 No fix listed

References

  • 73903 third-party-advisory vdb-entry
  • 36561 exploit third-party-advisory vdb-entry