CVE-2006-7247 – Joomla! 1.0.9 - 'Weblinks' Blind SQL Injection

https://notcve.org/view.php?id=CVE-2006-7247

SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter. Vulnerabilidad de inyección SQL en el componente Weblinks (com_weblinks) para Joomla! y Mambo v1.0.9 y anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro título. • https://www.exploit-db.com/exploits/1922 http://secunia.com/advisories/20746 http://www.exploit-db.com/exploits/1922 http://www.openwall.com/lists/oss-security/2011/12/24/2 http://www.openwall.com/lists/oss-security/2011/12/24/3 http://www.osvdb.org/26626 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •