CVE-2007-0373

Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands via (1) the searchword parameter in certain files; the where parameter in (2) plugins/search/content.php or (3) plugins/search/weblinks.php; the text parameter in (4) plugins/search/contacts.php, (5) plugins/search/categories.php, or (6) plugins/search/sections.php; or (7) the email parameter in database/table/user.php, which is not properly handled by the check function.

• http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlExploit
• http://osvdb.org/32527
• http://osvdb.org/32528
• http://osvdb.org/32529
• http://osvdb.org/32530
• http://osvdb.org/32531
• http://osvdb.org/32532
• http://osvdb.org/32533
• http://www.hackers.ir/advisories/festival.txtExploit
• http://www.securityfocus.com/archive/1/459203/100/0/threaded
• http://www.securityfocus.com/bid/22122Exploit, Vendor Advisory
• http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlExploit
• http://osvdb.org/32527
• http://osvdb.org/32528
• http://osvdb.org/32529
• http://osvdb.org/32530
• http://osvdb.org/32531
• http://osvdb.org/32532
• http://osvdb.org/32533
• http://www.hackers.ir/advisories/festival.txtExploit
• http://www.securityfocus.com/archive/1/459203/100/0/threaded
• http://www.securityfocus.com/bid/22122Exploit, Vendor Advisory

Published

Jan 19, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0367Rumpus 5.1 and earlier has weak permissions for certain file…
• CVE-2007-0368Stack-based buffer overflow in mbse-bbs 0.70 and earlier all…
• CVE-2007-0369SQL injection vulnerability in phpBP RC3 (2.204) and earlier…
• CVE-2007-0370Unrestricted file upload vulnerability in index.php in phpBP…
• CVE-2007-0371A certain ActiveX control in the Common Controls Replacement…
• CVE-2007-0372Multiple SQL injection vulnerabilities in Francisco Burzi PH…
• CVE-2007-0374SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Be…
• CVE-2007-0375Joomla! 1.5.0 Beta allows remote attackers to obtain sensiti…
• CVE-2007-0376Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7…
• CVE-2007-0377Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow…
• CVE-2007-0378Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 all…
• CVE-2007-0379Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 a…