Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2009-0730

Published: 24/02/2009 Updated: 10/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 690
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Gigcalendar

Vulnerability Summary

Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote malicious users to execute arbitrary SQL commands via (1) the gigcal _venues_id parameter in a details action to index.php, which is not properly handled by venuedetails.php, and (2) the gigcal_bands_id parameter in a details action to index.php, which is not properly handled by banddetails.php, different vectors than CVE-2009-0726.

Vulnerable Product Search on Vulmon Subscribe to Product

gigcalendar com_gigcalendar 1.0

Exploits

Exploit DB: Joomla! Component Gigcal 1.x - 'id' SQL Injection
***************************************************************************** * * * Joomla Component Gigcal SQL Injection Vulnerability * * * ***************************************************************************** ************************************ ...
Exploit DB: Joomla! / Mambo Component gigCalendar 1.0 - 'banddetails.php' SQL Injection
source: wwwsecurityfocuscom/bid/33859/info The gigCalendar component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit ...

References

CWE-89http://www.securityfocus.com/bid/33859http://www.securityfocus.com/bid/33863https://exchange.xforce.ibmcloud.com/vulnerabilities/48865http://www.securityfocus.com/archive/1/501176/100/0/threadedhttp://www.securityfocus.com/archive/1/501175/100/0/threadedhttp://www.securityfocus.com/archive/1/501174/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/7815/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook