CVE-2007-0373: Joomla! Joomla

Medium severity, CVSS 6.8. EPSS: 12% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands via (1) the searchword parameter in certain files; the where parameter in (2) plugins/search/content.php or (3) plugins/search/weblinks.php; the text parameter in (4) plugins/search/contacts.php, (5) plugins/search/categories.php, or (6) plugins/search/sections.php; or (7) the email parameter in database/table/user.php, which is not properly handled by the check function.

Affected products

• Joomla! Joomla: version 1.5.0_beta only

Published 2007-01-19. Last modified 2026-06-16.