Unscored severity · published Dec 15, 2007
CVE-2007-6362
SQL injection vulnerability in index.php in the RSGallery (com_rsgallery) 2.0 beta 5 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL…
–
CVSS
2.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in the RSGallery (com_rsgallery) 2.0 beta 5 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an inline page action.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RG
RS Gallery2 · Joomla
beta_5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6362
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6362
advisories.echo.or.id
http://advisories.echo.or.id/adv/adv86-K-159-2007.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/484606/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26704
www.exploit-db.com
https://www.exploit-db.com/exploits/4691
More from RS Gallery2
–
CVE-2006-6962
PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for Joomla! allows attackers to execute arbitrary PHP code via…
–
CVE-2006-5046
Unspecified vulnerability in RS Gallery2 (com_rsgallery2) 1.11.3 and earlier for Joomla! has unspecified impact and attack vectors, related to lack of "hardened language files."
–
CVE-2006-5047
Unspecified vulnerability in rsgallery2.html.php in RS Gallery2 component (com_rsgallery2) before 1.11.3 for Joomla! allows attackers to execute arbitrary code