CVE-2010-4865 SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail actio...
HighCVSS 7.5
EPSS 1.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| harmistechnology com jeguestbook | = 1.0 | No fix listed |
References
- adv.salvatorefresta.net exploit
- 68283 vdb-entry
- 41651 third-party-advisory vendor-advisory
- 8422 third-party-advisory
- 15157 exploit
- 20100930 JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities mailing-list
- 43605 exploit vdb-entry
- jeguestbook-index-sql-injection(62151) vdb-entry