SQL Injection Vulnerability in JExtensions JE Job Component for Joomla!
CVE-2010-5028

Currently unrated

Key Information:

Vendor

Harmistechnology

Status
Com Jejob
Vendor
CVE Published:
2 November 2011

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2010-5028?

The JExtensions JE Job component for Joomla! contains a vulnerability that enables remote attackers to exploit SQL injection through the 'catid' parameter in item actions directed to index.php. This perilous flaw allows them to execute arbitrary SQL commands, potentially compromising the integrity and security of the Joomla! installation. Site administrators are strongly urged to apply necessary patches and updates to mitigate this risk.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-5028 - Proof of Concept

References

http://www.vupen.com/english/advisories/2010/1269
vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/40193
vdb-entryx_refsource_BID
http://secunia.com/advisories/39837
third-party-advisoryx_refsource_SECUNIA

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.