CVE-2010-1479

CVE-2010-1479 corresponds to a SQL injection in Joomla!'s RokModule (com_rokmodule) component version 1.1, exploitable via the moduleid parameter in index.php. The underlying issue is improper handling of user-supplied input before it is used to construct database queries, allowing remote attacke...

CVE-2010-1480

The CVE-2010-1480 entry concerns the RokModule (com_rokmodule) component version 1.1 for Joomla! and a SQL injection that allows a remote attacker to execute arbitrary SQL via the module parameter to index.php. This vulnerability is rooted in improper input handling in the affected module. Multip...