CVE-2005-3772: Joomla! Joomla

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the (1) Itemid variable in the Polls modules and (2) multiple unspecified methods in the mosDBTable class.

Affected products

• Joomla! Joomla: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only

Published 2005-11-23. Last modified 2026-06-16.