CVE-2010-2148

CVE-2010-2148 affects the Joomla! My Car (com_mycar) component version 1.0, where an SQL injection via the pagina parameter to index.php allows remote attackers to execute arbitrary SQL commands. This is the stated impact: partial confidentiality, integrity, and availability concerns. The connect...

CVE-2010-2147: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the My Car commycar component 1.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the modveh parameter to index.php...

CVE-2010-2148: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the My Car commycar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pagina parameter to index.php...