PT-2023-9887 · Unknown · Gesellix Titlelink
CVE-2010-10003
·
Published
2023-01-04
·
Updated
2024-05-17
CVSS v2.0
5.2
Medium
| Vector | AV:A/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
gesellix titlelink (affected versions not specified)
Description
A critical issue was found in gesellix titlelink on Joomla, affecting an unknown functionality of the file plugin content title.php. The manipulation of the
phrase argument leads to SQL injection.Recommendations
Apply a patch to fix this issue. The patch is named b4604e523853965fa981a4e79aef4b554a535db0. As a temporary workaround, consider restricting access to the
plugin content title.php file until the patch is applied.Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gesellix Titlelink