CVE-2010-4898

SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2011-10-08

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Com Gantry (Gantry-framework)

References

• http://osvdb.org/67825
• http://secunia.com/advisories/41300
• http://www.exploit-db.com/exploits/14911
• http://www.gantry-framework.org/news/70-joomla-version-3011-released
• http://www.securityfocus.com/bid/43017