CVE-2010-0375

published 2010-01-21

CVE-2010-0375: SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitrary SQL commands via…

PriorityP342high7.5CVSS 2.0

AVNACLAuNCPIPAP

EXPLOIT

EPSS

1.00%

58.5th percentile

SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php UPDATE

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php UPDATE ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php UPDATE Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php UPDATE"; flow:established,to_server; http.uri; content:"/gmail.php?"; nocase; content:"UPDATE"; nocase; content:"SET"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005401; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_t

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php DELETE

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php DELETE ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php DELETE Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php DELETE"; flow:established,to_server; http.uri; content:"/gmail.php?"; nocase; content:"DELETE"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005399; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php ASCII

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php ASCII ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php ASCII Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php ASCII"; flow:established,to_server; http.uri; content:"/gmail.php?"; nocase; content:"ASCII("; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005400; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php ASCII

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php ASCII ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php ASCII Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php ASCII"; flow:established,to_server; http.uri; content:"/plugins/authentication/ldap.php?"; nocase; content:"ASCII("; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005412; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techni

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php INSERT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php INSERT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php INSERT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php INSERT"; flow:established,to_server; http.uri; content:"/gmail.php?"; nocase; content:"INSERT"; nocase; content:"INTO"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005398; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php UPDATE

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php UPDATE ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php UPDATE Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php UPDATE"; flow:established,to_server; http.uri; content:"/plugins/authentication/ldap.php?"; nocase; content:"UPDATE"; nocase; content:"SET"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005413; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniq

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php DELETE

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php DELETE ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php DELETE Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php DELETE"; flow:established,to_server; http.uri; content:"/example.php?"; nocase; content:"DELETE"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005405; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190,

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php ASCII

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php ASCII ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php ASCII Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php ASCII"; flow:established,to_server; http.uri; content:"/example.php?"; nocase; content:"ASCII("; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005406; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190,

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UNION SELECT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UNION SELECT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UNION SELECT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UNION SELECT"; flow:established,to_server; http.uri; content:"/example.php?"; nocase; content:"UNION"; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005403; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniq

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php SELECT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php SELECT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php SELECT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php SELECT"; flow:established,to_server; http.uri; content:"/plugins/user/example.php?"; nocase; content:"SELECT"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005390; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniq

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php SELECT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php SELECT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php SELECT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php SELECT"; flow:established,to_server; http.uri; content:"/gmail.php?"; nocase; content:"SELECT"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005396; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UPDATE

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UPDATE ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UPDATE Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UPDATE"; flow:established,to_server; http.uri; content:"/plugins/user/example.php?"; nocase; content:"UPDATE"; nocase; content:"SET"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005395; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniqu

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php DELETE

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php DELETE ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php DELETE Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php DELETE"; flow:established,to_server; http.uri; content:"/plugins/user/example.php?"; nocase; content:"DELETE"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005392; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniq

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php ASCII

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php ASCII ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php ASCII Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php ASCII"; flow:established,to_server; http.uri; content:"/plugins/user/example.php?"; nocase; content:"ASCII("; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005394; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniq

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UNION SELECT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UNION SELECT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UNION SELECT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UNION SELECT"; flow:established,to_server; http.uri; content:"/plugins/user/example.php?"; nocase; content:"UNION"; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005391; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access,

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php SELECT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php SELECT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php SELECT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php SELECT"; flow:established,to_server; http.uri; content:"/example.php?"; nocase; content:"SELECT"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005402; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190,

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php INSERT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php INSERT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php INSERT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php INSERT"; flow:established,to_server; http.uri; content:"/example.php?"; nocase; content:"INSERT"; nocase; content:"INTO"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005404; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190,

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php DELETE

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php DELETE ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php DELETE Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php DELETE"; flow:established,to_server; http.uri; content:"/modules/mod_mainmenu/menu.php?"; nocase; content:"DELETE"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005417; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniqu

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UPDATE

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UPDATE ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UPDATE Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php UPDATE"; flow:established,to_server; http.uri; content:"/example.php?"; nocase; content:"UPDATE"; nocase; content:"SET"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005407; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, m

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php UPDATE

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php UPDATE ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php UPDATE Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php UPDATE"; flow:established,to_server; http.uri; content:"/modules/mod_mainmenu/menu.php?"; nocase; content:"UPDATE"; nocase; content:"SET"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005419; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php INSERT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php INSERT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php INSERT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php INSERT"; flow:established,to_server; http.uri; content:"/modules/mod_mainmenu/menu.php?"; nocase; content:"INSERT"; nocase; content:"INTO"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005416; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniqu

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php ASCII

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php ASCII ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php ASCII Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php ASCII"; flow:established,to_server; http.uri; content:"/modules/mod_mainmenu/menu.php?"; nocase; content:"ASCII("; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005418; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniqu

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php UNION SELECT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php UNION SELECT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php UNION SELECT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php UNION SELECT"; flow:established,to_server; http.uri; content:"/plugins/authentication/ldap.php?"; nocase; content:"UNION"; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005409; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access,

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php UNION SELECT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php UNION SELECT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php UNION SELECT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- gmail.php UNION SELECT"; flow:established,to_server; http.uri; content:"/gmail.php?"; nocase; content:"UNION"; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005397; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php INSERT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php INSERT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php INSERT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- example.php INSERT"; flow:established,to_server; http.uri; content:"/plugins/user/example.php?"; nocase; content:"INSERT"; nocase; content:"INTO"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005802; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniq

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php INSERT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php INSERT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php INSERT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php INSERT"; flow:established,to_server; http.uri; content:"/plugins/authentication/ldap.php?"; nocase; content:"INSERT"; nocase; content:"INTO"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005410; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techni

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php SELECT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php SELECT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php SELECT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php SELECT"; flow:established,to_server; http.uri; content:"/plugins/authentication/ldap.php?"; nocase; content:"SELECT"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005408; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techni

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php SELECT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php SELECT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php SELECT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php SELECT"; flow:established,to_server; http.uri; content:"/modules/mod_mainmenu/menu.php?"; nocase; content:"SELECT"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005414; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techniqu

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php DELETE

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php DELETE ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php DELETE Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- ldap.php DELETE"; flow:established,to_server; http.uri; content:"/plugins/authentication/ldap.php?"; nocase; content:"DELETE"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005411; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_techni

Suricata

ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php UNION SELECT

suricata·2010-07-30·CVSS 5.0

CVE-2007-0375 [MEDIUM] ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php UNION SELECT ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php UNION SELECT Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Joomla! SQL Injection Attempt -- menu.php UNION SELECT"; flow:established,to_server; http.uri; content:"/modules/mod_mainmenu/menu.php?"; nocase; content:"UNION"; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0375; reference:url,www.securityfocus.com/archive/1/archive/1/459203/100/0/threaded; classtype:web-application-attack; sid:2005415; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, m