Lucene search
HistoryOct 05, 2011 - 10:55 a.m.
CVE-2010-4862
cve-2010-4862
sql injection
je directory
joomla
remote code execution
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
37.7%
SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.
Affected configurations
Node
harmistechnologycom_jedirectoryMatch1.0
joomlajoomla\!
| CPE | Name | Operator | Version |
|---|---|---|---|
| harmistechnology:com_jedirectory | harmistechnology com jedirectory | eq | 1.0 |
Related
cvelist
cvelist
CVE-2010-4862
2011-10-05 10:00:00
nvd
nvd
CVE-2010-4862
2011-10-05 10:55:07
prion
prion
Sql injection
2011-10-05 10:55:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
37.7%
Related for CVE-2010-4862