CVE-2015-7297

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute...

7.5 HighPublic exploit

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858.

Exploit likelihood

100.0%Up 6.7 points since Feb 4, 2022

What each source reports

NVD Score used7.5

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858.

Record: CVE-2015-7297
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE ListNo score

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858.

Record: CVE-2015-7297
Updated: 2026-11-02

EUVDEUVD-2015-7226No score

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858.

Record: EUVD-2015-7226
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5j7c-6v58-rh4xNo score

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute...

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858.

Record: GHSA-5j7c-6v58-rh4x
Weakness: CWE-89
Updated: 2026-11-02

Affected products

joomla joomla\!

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Joomla Content History SQLi Remote Code Execution	2015-10-23
PoC in GitHub	CCrashBandicot/ContentHistory	2015-11-02
Exploit-DB	Joomla! 3.4.4 Component Content History - SQL Injection / Remote Code Execution (Metasploit)	2015-11-23
PoC in GitHub	areaventuno/exploit-joomla	2020-10-29
PoC in GitHub	Cappricio-Securities/CVE-2015-7297	2024-05-26
Metasploit	Joomla com_contenthistory Error-Based SQL Injection	2015-10-22
Nuclei	Joomla! Core SQL Injection

History

History
Recorded	Changed	Sources
Nov 10, 2026	exploits, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, Nuclei, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-7297 is a high vulnerability (CVSS 7.5) in Joomla Joomla\!, published October 29, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. No source names a fixed version.

References

Show 5 moreShow less