CVE-2010-4166

Multiple SQL injection vulnerabilities in Joomla!

published January 18, 2011

CVSS
—
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via (1) the filter_order parameter in a com_weblinks category action to index.php, (2) the filter_order_Dir parameter in a com_weblinks category action to index.php, or (3) the filter_order_Dir parameter in a com_messages action to administrator/index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01423 · 72.5th percentile
Published
2011-01-18T17:00Z
EPSS history
Timeline
  • 18 JAN 17:00Z
    Multiple SQL injection vulnerabilities in Joomla!
    cvelistv5