PT-2023-9887 · Unknown · Gesellix Titlelink

CVE-2010-10003

·

Publicado

2023-01-04

·

Atualizado

2024-05-17

CVSS v2.0

5.2

Média

VetorAV:A/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions gesellix titlelink (affected versions not specified)
Description A critical issue was found in gesellix titlelink on Joomla, affecting an unknown functionality of the file plugin content title.php. The manipulation of the phrase argument leads to SQL injection.
Recommendations Apply a patch to fix this issue. The patch is named b4604e523853965fa981a4e79aef4b554a535db0. As a temporary workaround, consider restricting access to the plugin content title.php file until the patch is applied.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2010-10003

Produtos afetados

Gesellix Titlelink