CVE

Id
47628  
CVE No.
CVE-2010-5044  
Status
Candidate  
Description
SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL commands via the search parameter in a log action to administrator/index.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20111102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
519128 47628 CVE-2010-5044 EXPLOIT-DB:13746  View
519129 47628 CVE-2010-5044 URL:http://www.exploit-db.com/exploits/13746/  View
519130 47628 CVE-2010-5044 BID:40588  View
519131 47628 CVE-2010-5044 URL:http://www.securityfocus.com/bid/40588  View
519132 47628 CVE-2010-5044 OSVDB:65185  View
519133 47628 CVE-2010-5044 URL:http://osvdb.org/65185  View
519134 47628 CVE-2010-5044 SECUNIA:40055  View
519135 47628 CVE-2010-5044 URL:http://secunia.com/advisories/40055  View
519136 47628 CVE-2010-5044 VUPEN:ADV-2010-1363  View
519137 47628 CVE-2010-5044 URL:http://www.vupen.com/english/advisories/2010/1363  View
519138 47628 CVE-2010-5044 XF:searchlog-index-sql-injection(59152)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32778 JVNDB-2011-003018 JoomlaTune JComments におけるクロスサイトスクリプティングの脆弱性 Joomla! の JoomlaTune JComments (com_jcomments) コンポーネント内にある admin.jcomments.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-5048 47628 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003018.html  View