PT-2010-1972 · Open Source Matters+1 · Joomla!+1
CVE-2010-0158
·
Publicado
2010-01-06
·
Atualizado
2024-08-07
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
JoomlaBamboo (JB) Simpla Admin template for Joomla (affected versions not specified)
Description
A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the
id parameter in an article action to the com content component, reachable through "index.php". The vendor disputes this report, stating that there is no SQL injection vulnerability involving the id parameter in an article view.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Joomla!
Joomlabamboo Simpla Admin Template