CVE-2013-7219

N/A Unknown

Published: January 21, 2014 Modified: April 29, 2026

Description

SQL injection vulnerability in vote.php in the 2Glux Sexy Polling (com_sexypolling) component before 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the answer_id[] parameter.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://2glux.com/forum/sexypolling/sexy-polling-security-vulnerability-notification-t2026.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/530789/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/90519

Source: cve@mitre.org

https://www.htbridge.com/advisory/HTB23193

Source: cve@mitre.org

Exploit

http://2glux.com/forum/sexypolling/sexy-polling-security-vulnerability-notification-t2026.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/530789/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/90519

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.htbridge.com/advisory/HTB23193

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

0.2%

45th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-89

Affected Vendors

2glux

Related CVEs