CVE-2010-5044 SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL...
MediumCVSS 6.0
EPSS 0.96%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL commands via the search parameter in a log action to administrator/index.php. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kanich com searchlog | = 3.1.0 | No fix listed |
References
- 65185 vdb-entry
- 40055 third-party-advisory vendor-advisory
- 13746 exploit
- 40588 exploit vdb-entry
- ADV-2010-1363 vdb-entry vendor-advisory
- searchlog-index-sql-injection(59152) vdb-entry