CVE-2010-1873
com_jvehicles 1.0, 2.0, and 2.1111 - SQL Injection via aid Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-1873. PoCs published by Don Tukulesto, Chip d3 bi0s.
AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in the Joomla component Jvehicles. It provides a proof-of-concept URL demonstrating the vulnerability but does not include executable exploit code.
Description
SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information.
Exploits (2)
This is a writeup describing a SQL injection vulnerability in the Joomla component Jvehicles. It provides a proof-of-concept URL demonstrating the vulnerability but does not include executable exploit code.
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component Jvehicles 1.0. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter in the URL.