Test ID:	1.3.6.1.4.1.25623.1.0.105419
Category:	Web application abuses
Title:	Joomla! 3.2.0 - 3.4.4 SQLi Vulnerability - Active Check
Summary:	Joomla! is prone to a SQL injection (SQLi) vulnerability.
Description:	Summary: Joomla! is prone to a SQL injection (SQLi) vulnerability. Vulnerability Insight: An SQL Injection vulnerability exists in the file '/administrator/components/com_contenthistory/models/history.php' a core module installed as part of a default Joomla installation. Vulnerability Impact: CVE-2015-7857 enables an unauthorized remote user to gain administrator privileges by hijacking the administrator session. The following exploitation of the vulnerability, the attacker may gain full control of the web site and execute additional attacks. Affected Software/OS: Joomla! versions 3.2.0 through 3.4.4. Solution: Update to version 3.4.5 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7297 BugTraq ID: 77295 http://www.securityfocus.com/bid/77295 https://www.exploit-db.com/exploits/38797/ http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html http://www.rapid7.com/db/modules/auxiliary/gather/joomla_contenthistory_sqli http://www.rapid7.com/db/modules/exploit/unix/webapp/joomla_contenthistory_sqli_rce https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ http://www.securitytracker.com/id/1033950 Common Vulnerability Exposure (CVE) ID: CVE-2015-7857 Common Vulnerability Exposure (CVE) ID: CVE-2015-7858 Common Vulnerability Exposure (CVE) ID: CVE-2015-7859 Common Vulnerability Exposure (CVE) ID: CVE-2015-7899
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.