CVE-2010-0946

SQL injection vulnerability in the Keep It Simple Stupid (KISS) Software Advertiser (com_ksadvertiser) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showcats action to index.php.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:kiss-software:com_ksadvertiser:*:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

History

14 Feb 2024, 01:17

Type Values Removed Values Added
References () http://explo.it/exploits/11068 - Exploit () http://explo.it/exploits/11068 - Exploit, URL Repurposed

Information

Published : 2010-03-08 15:30

Updated : 2024-02-14 01:17


NVD link : CVE-2010-0946

Mitre link : CVE-2010-0946

CVE.ORG link : CVE-2010-0946


JSON object : View

Products Affected

joomla

  • joomla\!

kiss-software

  • com_ksadvertiser
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')