CVE-2009-3335

Turtushout - SQL Injection

Title source: rule
STIX 2.1

Description

SQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Name field.

Exploits (1)

exploitdb WORKING POC VERIFIED
by jdc · textwebappsphp
https://www.exploit-db.com/exploits/9653

References (2)

Core 2
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/9653
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/53209

Scores

EPSS 0.0023
EPSS Percentile 46.1%

Details

CWE
CWE-89
Status published
Products (1)
turtus/turtushout 0.11
Published Sep 24, 2009
Tracked Since Feb 18, 2026