CVE-2010-4941 SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save acti...
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomlamo com teams | = 1_1028_100809_1711 | No fix listed |
References
- adv.salvatorefresta.net exploit
- 40933 third-party-advisory vendor-advisory
- 8463 third-party-advisory
- 14598 exploit
- 20100810 Teams 1_1028_100809_1711 Joomla Component Multiple Blind SQL Injection Vulnerabilities mailing-list