CVE-2011-4570
Takeaweb Com Timereturns - SQL Injection
Title source: ruleDescription
SQL injection vulnerability in the Time Returns (com_timereturns) component 2.0 and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a timereturns action to index.php.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by kaMtiEz · textwebappsphp
https://www.exploit-db.com/exploits/17944
Scores
EPSS
0.0030
EPSS Percentile
52.8%
Classification
CWE
CWE-89
Status
draft
Affected Products (1)
takeaweb/com_timereturns
Timeline
Published
Nov 29, 2011
Tracked Since
Feb 18, 2026