CVE-2010-2907 SQL injection vulnerability in the Huru Helpdesk (com_huruhelpdesk) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid[0] parameter in a detail action to index...
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the Huru Helpdesk (com_huruhelpdesk) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid[0] parameter in a detail action to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huruhelpdesk com huruhelpdesk | = 0.85 | No fix listed |
| huruhelpdesk com huruhelpdesk | = 0.86 | No fix listed |
| huruhelpdesk com huruhelpdesk | = 0.87 | No fix listed |
| huruhelpdesk com huruhelpdesk | = 0.88-a | No fix listed |
| huruhelpdesk com huruhelpdesk | = 0.88-b | No fix listed |
| huruhelpdesk com huruhelpdesk | = 0.88-c | No fix listed |
References
- packetstormsecurity.org exploit
- 14449 exploit
- 39366 exploit vdb-entry
- huruhelpdeskcom-index-sql-injection(60609) vdb-entry