CVE-2006-7123 - CVE House
Back to Database
Status published High CVE-2006-7123

Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla)...

Vulnerability Description

Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters when importing the (a) ip-to-country.csv file; and the (2) HTTP Referer, (3) HTTP User Agent, and (4) HTTP Accept Language headers to (b) bsqtemplateinc.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-7123

Credits & Attribution

No credits recorded in the NVD database.

References

More from joomla

View All →
CVE-2020-8421
An issue was discovered in Joomla! before 3.9.15. Inadequate escaping...
Medium 6.1
CVE-2020-8420
An issue was discovered in Joomla! before 3.9.15. A missing...
High 8.8
CVE-2020-8419
An issue was discovered in Joomla! before 3.9.15. Missing token...
High 8.8
CVE-2020-24599
An issue was discovered in Joomla! before 3.9.21. Lack of...
Medium 6.1
CVE-2020-24598
An issue was discovered in Joomla! before 3.9.21. Lack of...
Medium 6.1

Affected Vendor

Affected Software

bsq sitestats
Vulnerable Versions:
1.8.0

Timeline

Official Publish: March 6th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.