CVE-2015-7857

SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla!

published October 29, 2015

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.9th percentile for exploit probability.

CVSS
—
EPSS
94%
Percentile
99.9
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to execute arbitrary SQL commands via the list[select] parameter to index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.94472 · 99.9th percentile
Published
2015-10-29T20:00Z
EPSS history
Timeline
  • 29 OCT 20:00Z
    SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla!
    cvelistv5