Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-2513. PoCs published by L0rd CrusAd3r.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Joomla JE Ajax Event Calendar version 1.0.5. It includes a demo URL showing the vulnerable parameter but lacks functional exploit code.
Description
SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php.
Exploits (2)
The provided text describes a SQL injection vulnerability in Joomla JE Ajax Event Calendar version 1.0.5. It includes a demo URL showing the vulnerable parameter but lacks functional exploit code.
This is a functional SQL injection exploit for the JE Ajax Event Calendar Joomla component. It leverages a vulnerable parameter to extract user credentials from the database via a UNION-based SQLi attack.