CVE-2010-5022

JExtensions JE Story Submit (com_jesubmit) 1.4 - SQL Injection via View Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-5022. PoCs published by L0rd CrusAd3r.

AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Joomla JE Story submit component version 1.4. It includes a demo URL pattern but lacks actual exploit code or technical details for reproduction.

Description

SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php.

Exploits (1)

exploitdb WRITEUP
by L0rd CrusAd3r · textwebappsphp
https://www.exploit-db.com/exploits/14054

The provided text describes a SQL injection vulnerability in Joomla JE Story submit component version 1.4. It includes a demo URL pattern but lacks actual exploit code or technical details for reproduction.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: Joomla JE Story submit component 1.4
No auth needed
Prerequisites: Access to the vulnerable Joomla component
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/41171
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/14054

Scores

EPSS 0.0093
EPSS Percentile 55.9%

Details

CWE
CWE-89
Status published
Products (1)
harmistechnology/com_jesubmit 1.4
Published Nov 02, 2011
Tracked Since Feb 18, 2026