CVE-2010-4862

SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
harmistechnologycom_jedirectory
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/68308
http://secunia.com/advisories/41681
http://www.exploit-db.com/exploits/15163
http://www.securityfocus.com/bid/43630
https://exchange.xforce.ibmcloud.com/vulnerabilities/62191
http://osvdb.org/68308
http://secunia.com/advisories/41681
http://www.exploit-db.com/exploits/15163
http://www.securityfocus.com/bid/43630
https://exchange.xforce.ibmcloud.com/vulnerabilities/62191