CVE-2014-7981
Joomla! - SQL Injection
Title source: ruleDescription
SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploits (1)
metasploit
WORKING POC
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/joomla_weblinks_sqli.rb
Scores
EPSS
0.1434
EPSS Percentile
94.4%
Details
CWE
CWE-89
Status
published
Products (10)
joomla/joomla\!
3.1.0
joomla/joomla\!
3.1.1
joomla/joomla\!
3.1.2
joomla/joomla\!
3.1.3
joomla/joomla\!
3.1.4
joomla/joomla\!
3.1.5
joomla/joomla\!
3.1.6
joomla/joomla\!
3.2.0
joomla/joomla\!
3.2.1
joomla/joomla\!
3.2.2
Published
Oct 08, 2014
Tracked Since
Feb 18, 2026