CVE-2010-4272

2010-11-1623:00:00

mitre

www.cve.org

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

47.0%

JSON

SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com_sponsorwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.

References

packetstormsecurity.org/1011-exploits/joomlasponsorwall-sql.txt

secunia.com/advisories/42072

www.exploit-db.com/exploits/15367

www.osvdb.org/68956

www.securityfocus.com/bid/44571

exchange.xforce.ibmcloud.com/vulnerabilities/62915