Unscored severity · published Dec 7, 2007
CVE-2007-6272
Multiple SQL injection vulnerabilities in index.php in Joomla! 1.5 RC3 allow remote attackers to execute arbitrary SQL commands via (1) the view parameter to the com_content…
–
CVSS
1%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in index.php in Joomla! 1.5 RC3 allow remote attackers to execute arbitrary SQL commands via (1) the view parameter to the com_content component, (2) the task parameter to the com_search component, or (3) the option parameter in a search action to the com_search component.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JO
Joomla · Joomla
1.5rc3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6272
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6272
securityreason.com
http://securityreason.com/securityalert/3422
www.securityfocus.com
http://www.securityfocus.com/archive/1/484603/100/0/threaded
Exploit
http://www.securityfocus.com/bid/26707
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/38867
More from Joomla
9.8
CVE-2016-10033
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute…
5.3
CVE-2023-23752
[20230201] - Core - Improper access check in webservice endpoints
9.8
CVE-2026-73373
Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2
9.8
CVE-2026-35221
Joomla! Core - [20260506] - Authenticated blind SQLi in com_finder
9.8
CVE-2026-40383
Joomla! Core - [20260509] - LFI in HTMLView layout parameter