CVE-2010-4904 SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_name parameter in a view ac...
HighCVSS 7.5
EPSS 0.99%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_name parameter in a view action to index.php. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simon philips com aardvertiser | = 2.1 | No fix listed |
| simon philips com aardvertiser | = 2.1.1 | No fix listed |
References
- 41293 third-party-advisory vendor-advisory
- 14922 exploit
- 43014 exploit vdb-entry
- ADV-2010-2310 vdb-entry vendor-advisory