SQL Injection Vulnerability in Joomla! Weblinks Component
CVE-2010-2679

Currently unrated

Key Information:

Vendor

Joomla
Status
Com Weblinks
Joomla\!
Vendor
CVE Published:
8 July 2010

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2010-2679?

The SQL injection vulnerability in the Joomla! Weblinks (com_weblinks) component allows remote attackers to exploit the id parameter in a view action to index.php. This vulnerability enables attackers to execute arbitrary SQL commands against the database, potentially compromising sensitive data and application integrity. Proper input validation and sanitation are critical to mitigate the risks associated with this vulnerability.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-2679 - Proof of Concept

References

http://packetstormsecurity.org/1003-exploits/joomlaweblin...
x_refsource_MISC
http://www.securityfocus.com/archive/1/510364/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/39032
vdb-entryx_refsource_BID

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.