high7.5Public exploit code
CVE-2010-0803
SQL injection vulnerability in the jVideoDirect (com_jvideodirect) component 1.1 RC3b for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component jVideoDirect - Blind SQL Injection2010-01-28 · webapps · php · Verified
Impact
SQL injection vulnerability in the jVideoDirect (com_jvideodirect) component 1.1 RC3b for Joomla! allows remote attackers to execute arbitrary SQL commands via the v parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jvideodirect | Com Jvideodirect | Version 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/62042
- http://packetstormsecurity.org/1001-exploits/joomlajvideodirect-sql.txt
- http://secunia.com/advisories/38436
- http://www.exploit-db.com/exploits/11280
- http://www.securityfocus.com/bid/37990
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55957
- http://osvdb.org/62042
- http://packetstormsecurity.org/1001-exploits/joomlajvideodirect-sql.txt
- http://secunia.com/advisories/38436
- http://www.exploit-db.com/exploits/11280
- http://www.securityfocus.com/bid/37990
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55957