CVE-2010-4517

CVE-2010-4517 affects Joomla! via the JExtensions JE Auto (com_jeauto) 1.0 component. The vulnerability is an SQL injection that occurs when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary SQL commands through the char parameter in an item action to index.php. Affected...

CVE-2010-4720

CVE-2010-4720 : The Joomla! extension JE Auto (com_jeauto) vulnerable to SQL injection before version 1.1. The underlying issue is a SQL injection vulnerability on the view item page, allowing remote attackers to execute arbitrary SQL commands. Impact per the source describes compromised data int...