CVE-2010-5043

Name of the Vulnerable Software and Affected Versions DJ-ArtGallery (com djartgallery) version 0.9.1 for Joomla!

Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the cid[] parameter in an editItem action to administrator/index.php.

Recommendations For version 0.9.1, avoid using the cid[] parameter in the editItem action to administrator/index.php until a fix is available. As a temporary workaround, consider restricting access to the administrator/index.php endpoint to minimize the risk of exploitation.