39238Third-party advisory
http://secunia.com/advisories/39238 CVE-2010-1716
Joomla! Component Agenda Address Book 1.0.1 - 'id' SQL Injection
Record summary
CVE-2010-1716 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBJoomla! Component Agenda Address Book 1.0.1 - 'id' SQL InjectionExploitDB exploitby v3n0mNot analyzed1 file
References
712132exploit
http://www.exploit-db.com/exploits/12132 joomlanetprojects.com
http://www.joomlanetprojects.com/index.php/en/joomla-projects-downloads/joomla-1/joomla-1/42-comagenda.html 63723vdb entry
http://www.osvdb.org/63723 39380vdb entry
http://www.securityfocus.com/bid/39380 agenda-index-sql-injection(57770)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/57770 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-1716