CVE-2009-3834

Photoblog (com_photoblog) alpha 3 and alpha 3a - SQL Injection via Category Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in the Photoblog (com_photoblog) component alpha 3 and alpha 3a for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in a blogs action to index.php.

References (3)

Core 3
Core References
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/36809
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/53943

Scores

EPSS 0.0117
EPSS Percentile 64.1%

Details

CWE
CWE-89
Status published
Products (2)
webguerilla/com_photoblog alpha_3
webguerilla/com_photoblog alpha_3a
Published Nov 02, 2009
Tracked Since Feb 18, 2026