← Database

CVE-2009-2395

HIGH CVSS: 7.5 Published: 2009-07-09 Modified: 2026-06-16

Description

SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php.

Affected Platforms

Joomla Joomla\!Joomlaworks Com K2

Weakness Type

CWE-89

References