CVE-2010-2909

SQL injection vulnerability in ttvideo.php in the TTVideo comttvideo component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a video action to index.php...

CVE-2010-2909

The CVE-2010-2909 issue affects TTVideo (com_ttvideo) 1.0 for Joomla! where the cid parameter in a video action to index.php enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network access, low attack co...