CVE-2010-1950

com_jnewspaper 1.0 - SQL Injection via date_info Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-1950. PoCs published by Don Tukulesto.

AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in Joomla's com_jnewspaper component. It provides a proof-of-concept URL but lacks executable exploit code.

Description

SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the date_info parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Don Tukulesto · textwebappsphp
https://www.exploit-db.com/exploits/12305

This is a writeup describing a SQL injection vulnerability in Joomla's com_jnewspaper component. It provides a proof-of-concept URL but lacks executable exploit code.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: Joomla com_jnewspaper (Online News Paper Manager)
No auth needed
Prerequisites: Joomla installation with vulnerable com_jnewspaper component
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39536

Scores

EPSS 0.0160
EPSS Percentile 72.6%

Details

CWE
CWE-89
Status published
Products (1)
emultisoft/com_jnewspaper 1.0
Published May 19, 2010
Tracked Since Feb 18, 2026