CVE-2009-2239

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-06-27 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3) casino_videopoker (com_casino_videopoker) components 0.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.

Affected products

Joomla! Com Casiino Blackjack: 0.3.1
Joomla! Com Casino Videopoker: 0.3.1
Joomla! Com Casinobase: 0.3.1

References

http://www.exploit-db.com/exploits/8743
http://www.securityfocus.com/bid/35041
https://exchange.xforce.ibmcloud.com/vulnerabilities/50645
http://www.exploit-db.com/exploits/8743
http://www.securityfocus.com/bid/35041
https://exchange.xforce.ibmcloud.com/vulnerabilities/50645

Get alerted when CVE-2009-2239 or the next vulnerability affects your stack