← Database

CVE-2009-1499

HIGH CVSS: 7.5 Published: 2009-05-01 Modified: 2026-06-16

Description

SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php. NOTE: SecurityFocus states that this issue has been disputed by the vendor.

Affected Platforms

Joomla Com MailtoJoomla Joomla\!

Weakness Type

CWE-89

References