CVE-2006-7123

BSQ Sitestats - SQL Injection via Import Parameters and HTTP Headers

Title source: llm

Description

Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters when importing the (a) ip-to-country.csv file; and the (2) HTTP Referer, (3) HTTP User Agent, and (4) HTTP Accept Language headers to (b) bsqtemplateinc.php.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/20267

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/29268

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/2360

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/447356/100/0/threaded

Vendor Advisory x_refsource_misc

http://secunia.com/secunia_research/2006-63/advisory/

Scores

EPSS 0.0002

EPSS Percentile 5.6%

Details

Status published

Products (1)

joomla/bsq_sitestats 1.8.0

Published Mar 06, 2007

Tracked Since Feb 18, 2026