← Database

CVE-2009-4057

HIGH CVSS: 7.5 Published: 2009-11-24 Modified: 2026-06-16

Description

SQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php.

Affected Platforms

Inertialfate Com If NexusJoomla Joomla\!

Weakness Type

CWE-89

References