CVE-2010-4696
Severity CVSS v4.0:
Pending analysis
Type:
CWE-89
SQL Injection
Publication date:
18/01/2011
Last modified:
11/04/2025
Description
Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the (1) filter_order or (2) filter_order_Dir parameter in a com_contact action to index.php, a different vulnerability than CVE-2010-4166. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:joomla:joomla\!:1.5.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.6:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.7:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.8:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.9:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.10:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.11:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.12:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.13:*:*:*:*:*:*:* | ||
cpe:2.3:a:joomla:joomla\!:1.5.14:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://developer.joomla.org/security/news/9-security/10-core-security/323-20101101-core-sqli-info-disclosurevulnerabilities.html
- http://openwall.com/lists/oss-security/2010/11/12/5
- http://openwall.com/lists/oss-security/2010/11/12/6
- http://secunia.com/advisories/42133
- http://developer.joomla.org/security/news/9-security/10-core-security/323-20101101-core-sqli-info-disclosurevulnerabilities.html
- http://openwall.com/lists/oss-security/2010/11/12/5
- http://openwall.com/lists/oss-security/2010/11/12/6
- http://secunia.com/advisories/42133