Unscored severity · published Mar 20, 2015
CVE-2015-2562
Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via…
–
CVSS
38.7%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) search_category_id, (2) sort_order, or (3) filter_manufacturer_ids in a displayproducts action to index.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)38.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EW
Ecommerce WD · Web-dorado
1.2.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2562
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2562
Exploit
http://packetstormsecurity.com/files/130896/Joomla-ECommerce-WD-1.2.5-SQL-Injection.html
Exploit
http://seclists.org/fulldisclosure/2015/Mar/123
www.securityfocus.com
http://www.securityfocus.com/bid/73285
www.exploit-db.com
https://www.exploit-db.com/exploits/36439/