QwikSec

Security Database

CVE

CWE

Training

CVE-2014-9102

Published: Nov 26, 2014

Modified: Sep 16, 2024

PUBLISHED

Description

Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrary SQL commands via the index value in an array parameter, as demonstrated by the topics[] parameter in an unfavorite action to index.php.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

http://packetstormsecurity.com/files/127683/Joomla-Kunena-Forum-3.0.5-SQL-Injection.html

x_refsource_MISC

http://www.kunena.org/docs/Kunena_3.0.6_Read_Me

x_refsource_CONFIRM

http://www.kunena.org/blog/139-kunena-3-0-6-released

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.