CVE-2010-4864

Summary: CVE-2010-4864 describes an SQL injection in Joomla!’s Club Manager (com_clubmanager) via the cm_id parameter in the equip presenta action to index.php. The root cause is unsanitized input leading to arbitrary SQL execution. The NVD entry assigns a base score of 7.5 (HIGH) under CVSS2, bu...