CVE-2007-2933

Joomla! com_philaform <1.2.0.0 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the form_id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by CypherXero · bashwebappsphp
https://www.exploit-db.com/exploits/4003

Scores

EPSS 0.0034
EPSS Percentile 56.8%

Details

Status published
Products (1)
phil-a-form/phil-a-form 1.2.0.0
Published May 31, 2007
Tracked Since Feb 18, 2026