high7.5Public exploit code
CVE-2010-4898
SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component Gantry 3.0.10 - Blind SQL Injection2010-09-05 · webapps · php
Impact
SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gantry-Framework | Com Gantry | Version 3.0.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/67825
- http://secunia.com/advisories/41300
- http://www.exploit-db.com/exploits/14911
- http://www.gantry-framework.org/news/70-joomla-version-3011-released
- http://www.securityfocus.com/bid/43017
- http://osvdb.org/67825
- http://secunia.com/advisories/41300
- http://www.exploit-db.com/exploits/14911
- http://www.gantry-framework.org/news/70-joomla-version-3011-released
- http://www.securityfocus.com/bid/43017