CVE-2011-4808 SQL injection vulnerability in the HM Community (com_hmcommunity) component before 1.01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a fnd_home action....
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the HM Community (com_hmcommunity) component before 1.01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a fnd_home action to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomlaextensions com hmcommunity | <= 1.0 | No fix listed |
References
- joomlaextensions.co.in
- 46656 third-party-advisory vendor-advisory
- 18050 exploit
- 76727 vdb-entry