CVE-2010-4938

Joomla! - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WRITEUP VERIFIED
by ViRuS Qalaa · textwebappsphp
https://www.exploit-db.com/exploits/34475

References (1)

Core 1
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/42455

Scores

EPSS 0.0001
EPSS Percentile 0.2%

Details

CWE
CWE-89
Status published
Products (1)
joomla/com_weblinks
Published Oct 09, 2011
Tracked Since Feb 18, 2026