Vulnerability Database

313,519

Total vulnerabilities in the database

CVE-2007-0374

SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing.

  • Published: Jan 19, 2007
  • Updated: Nov 9, 2025
  • CVE: CVE-2007-0374
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
mambo / mambo 4.6.1 4.6.1.x
Joomla / joomla 1.5.0_beta 1.5.0_beta.x
Joomla / joomla 1.0.11 1.0.11.x