CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2009-1258
https://notcve.org/view.php?id=CVE-2009-1258
SQL injection vulnerability in the RD-Autos (com_rdautos) component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad de inyección SQL en el componente RD-Autos (com_rdautos) v1.5.7 para Joomla! permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro "makeid" en index.php. • http://osvdb.org/53138 http://secunia.com/advisories/34578 http://www.securityfocus.com/bid/34364 https://exchange.xforce.ibmcloud.com/vulnerabilities/49671 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 2CVE-2009-0420 – Joomla! Component RD-Autos 1.5.5 - SQL Injection
https://notcve.org/view.php?id=CVE-2009-0420
SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Vulnerabilidad de inyección SQL en el componente RD-Autos (com_rdautos) v1.5.5 Stable para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id de index.php. • https://www.exploit-db.com/exploits/7795 http://secunia.com/advisories/33562 http://www.securityfocus.com/bid/33297 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •