ID de Prueba:	1.3.6.1.4.1.25623.1.0.105419
Categoría:	Web application abuses
Título:	Joomla! 3.2.0 - 3.4.4 SQLi Vulnerability - Active Check
Resumen:	Joomla! is prone to a SQL injection (SQLi) vulnerability.
Descripción:	Summary: Joomla! is prone to a SQL injection (SQLi) vulnerability. Vulnerability Insight: An SQL Injection vulnerability exists in the file '/administrator/components/com_contenthistory/models/history.php' a core module installed as part of a default Joomla installation. Vulnerability Impact: CVE-2015-7857 enables an unauthorized remote user to gain administrator privileges by hijacking the administrator session. The following exploitation of the vulnerability, the attacker may gain full control of the web site and execute additional attacks. Affected Software/OS: Joomla! versions 3.2.0 through 3.4.4. Solution: Update to version 3.4.5 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7297 BugTraq ID: 77295 http://www.securityfocus.com/bid/77295 https://www.exploit-db.com/exploits/38797/ http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html http://www.rapid7.com/db/modules/auxiliary/gather/joomla_contenthistory_sqli http://www.rapid7.com/db/modules/exploit/unix/webapp/joomla_contenthistory_sqli_rce https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ http://www.securitytracker.com/id/1033950 Common Vulnerability Exposure (CVE) ID: CVE-2015-7857 Common Vulnerability Exposure (CVE) ID: CVE-2015-7858 Common Vulnerability Exposure (CVE) ID: CVE-2015-7859 Common Vulnerability Exposure (CVE) ID: CVE-2015-7899
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.