high7.5Public exploit code
CVE-2010-3211
Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component JE FAQ Pro 1.5.0 - Multiple Blind SQL Injections2010-08-31 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via category categorylist operations with (1) the catid parameter or (2) the catid parameter in a lists action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jextn | Com Jefaqpro | Version 1.5.0 |