CVE-2010-2254

Summary

SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php.

Impact & exploitability

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://www.vupen.com/english/advisories/2010/0019Advisory
• http://www.securityfocus.com/bid/37602
• http://packetstormsecurity.org/1001-exploits/joomlaboh-sql.txtExploit
• http://www.exploit-db.com/exploits/10964Exploit