CVE-2009-4785 in Com Quicknewsinfo

Summary

by MITRE

SQL injection vulnerability in the Quick News (com_quicknews) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a view_item action to index.php.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Analysis

by VulDB Data Team • 06/23/2025

The CVE-2009-4785 vulnerability represents a critical sql injection flaw within the Quick News component of Joomla! version 1.5.0 through 1.5.12. This vulnerability exists in the com_quicknews component where the newsid parameter in the view_item action of index.php fails to properly validate or sanitize user input. The flaw enables remote attackers to inject malicious sql commands directly into the database query execution flow, potentially allowing full database access and manipulation. The vulnerability stems from improper input handling where user-supplied data is directly concatenated into sql statements without adequate sanitization or parameterization mechanisms.

The technical exploitation of this vulnerability occurs when an attacker crafts a malicious newsid parameter value that contains sql payload sequences designed to manipulate the underlying database query. The vulnerability is classified under cwe-89 sql injection as it allows attackers to inject sql commands that execute within the database context. When the vulnerable component processes the malicious input, the sql injection occurs during the database query construction phase, where the attacker-controlled data is incorporated into the sql statement without proper escaping or parameterization. This creates a path for attackers to execute arbitrary sql commands including data extraction, modification, or deletion operations.

The operational impact of CVE-2009-4785 extends beyond simple data theft to encompass complete system compromise and persistent access. Attackers can leverage this vulnerability to extract sensitive information such as user credentials, session data, and database schema information. The vulnerability also enables attackers to modify or delete database content, potentially corrupting the entire news component functionality. Furthermore, successful exploitation can lead to privilege escalation within the database context, allowing attackers to execute administrative commands and potentially gain shell access to the underlying server. This vulnerability affects all joomla content management system.

Mitigation strategies for CVE-2009-4785 require immediate patching of the vulnerable joomla installations and ensure all third-party components are updated to their latest secure versions.

Reservation

04/21/2010

Disclosure

04/21/2010

Moderation

accepted

Entry

VDB-52859

CPE

ready

Exploit

Download

EPSS

0.00950

KEV

no

Activities

very low

Sources

Do you know our Splunk app?

Download it now for free!