CVE-2006-7123

CVE-2006-7123 describes multiple SQL injection vulnerabilities in BSQ Sitestats, a component for Joomla, specifically versions 1.8.0 and potentially others prior to 2.2.1. Attackers can exploit this by injecting SQL commands through unspecified parameters during ip-to-country.csv file import, or via HTTP Referer, User Agent, and Accept Language headers processed by bsqtemplateinc.php. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing remote attackers to achieve partial confidentiality, integrity, and availability impacts without authentication. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this older vulnerability.