CVE-2011-1151

Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.

• CWE-89

• https://packetstormsecurity.com/files/101835/Joomla-1.6.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://www.openwall.com/lists/oss-security/2011/03/14/21Mailing List, Third Party Advisory
• https://packetstormsecurity.com/files/101835/Joomla-1.6.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://www.openwall.com/lists/oss-security/2011/03/14/21Mailing List, Third Party Advisory

Published

Feb 5, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1145The SQLDriverConnect() function in unixODBC before 2.2.14p2 …7.8
• CVE-2011-1146libvirt.c in the API in Red Hat libvirt 0.8.8 does not prope…
• CVE-2011-1147Multiple stack-based and heap-based buffer overflows in the …
• CVE-2011-1148Use-after-free vulnerability in the substr_replace function …
• CVE-2011-1149Android before 2.3 does not properly restrict access to the …
• CVE-2011-1150bbPress through 1.0.2 has XSS in /bb-login.php url via the r…6.1
• CVE-2011-1152Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2011-1153Multiple format string vulnerabilities in phar_object.c in t…
• CVE-2011-1154The shred_file function in logrotate.c in logrotate 3.7.9 an…
• CVE-2011-1155The writeState function in logrotate.c in logrotate 3.7.9 an…
• CVE-2011-1156feedparser.py in Universal Feed Parser (aka feedparser or py…
• CVE-2011-1157Cross-site scripting (XSS) vulnerability in feedparser.py in…