Language:
Severity: High
ID: 41645
File Name: idoblog_userid_sql_injection.nasl
Version: 1.18
Type: remote
Family: CGI abuses
Published: 9/25/2009
Updated: 6/5/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Enable CGI Scanning: true
Risk Factor: Medium
Score: 4.2
Risk Factor: High
Base Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Risk Factor: High
Base Score: 7.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CPE: cpe:/a:joomla:joomla%5c%21
Required KB Items: www/PHP, installed_sw/Joomla!
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Vulnerability Publication Date: 8/11/2009
CVE: CVE-2009-3417
BID: 80456