Vulnerability Details CVE-2010-4696
Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the (1) filter_order or (2) filter_order_Dir parameter in a com_contact action to index.php, a different vulnerability than CVE-2010-4166. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.9%
CVSS Severity
CVSS v2 Score 7.5
References
- http://developer.joomla.org/security/news/9-security/10-core-security/323-20101101-core-sqli-info-disclosurevulnerabilities.html
- http://openwall.com/lists/oss-security/2010/11/12/5
- http://openwall.com/lists/oss-security/2010/11/12/6
- http://secunia.com/advisories/42133
- http://developer.joomla.org/security/news/9-security/10-core-security/323-20101101-core-sqli-info-disclosurevulnerabilities.html
- http://openwall.com/lists/oss-security/2010/11/12/5
- http://openwall.com/lists/oss-security/2010/11/12/6
- http://secunia.com/advisories/42133
Products affected by CVE-2010-4696
-
cpe:2.3:a:joomla:joomla!:1.5.0
-
cpe:2.3:a:joomla:joomla!:1.5.1
-
cpe:2.3:a:joomla:joomla!:1.5.10
-
cpe:2.3:a:joomla:joomla!:1.5.11
-
cpe:2.3:a:joomla:joomla!:1.5.12
-
cpe:2.3:a:joomla:joomla!:1.5.13
-
cpe:2.3:a:joomla:joomla!:1.5.14
-
cpe:2.3:a:joomla:joomla!:1.5.15
-
cpe:2.3:a:joomla:joomla!:1.5.16
-
cpe:2.3:a:joomla:joomla!:1.5.17
-
cpe:2.3:a:joomla:joomla!:1.5.18
-
cpe:2.3:a:joomla:joomla!:1.5.19
-
cpe:2.3:a:joomla:joomla!:1.5.2
-
cpe:2.3:a:joomla:joomla!:1.5.20
-
cpe:2.3:a:joomla:joomla!:1.5.21
-
cpe:2.3:a:joomla:joomla!:1.5.3
-
cpe:2.3:a:joomla:joomla!:1.5.4
-
cpe:2.3:a:joomla:joomla!:1.5.5
-
cpe:2.3:a:joomla:joomla!:1.5.6
-
cpe:2.3:a:joomla:joomla!:1.5.7
-
cpe:2.3:a:joomla:joomla!:1.5.8
-
cpe:2.3:a:joomla:joomla!:1.5.9