CVEvulnerability
CVE-2010-2254
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php.
Affected configurations
• shape5 bridge of hope template
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.org/1001-exploits/joomlaboh-sql.txt Exploit
- http://www.exploit-db.com/exploits/10964 Exploit
- http://www.securityfocus.com/bid/37602 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0019 Vendor Advisory
- http://packetstormsecurity.org/1001-exploits/joomlaboh-sql.txt Exploit
- http://www.exploit-db.com/exploits/10964 Exploit
- http://www.securityfocus.com/bid/37602 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0019 Vendor Advisory