CVE-2010-4944
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-4944
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mambo/Joomla! Elite Experts (com_elite_experts)组件id参数SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mambo是一套基于PHP和MySql的开源网站内容管理系统（CMS）。该系统支持搜索引擎优化、模板/主题下载和流量统计等。 Mambo和Joomla!中的Elite Experts (com_elite_experts)组件存在SQL注入漏洞。远程攻击者可借助index.php的showExpertProfileDetailed操作的id参数执行任意SQL命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-4944
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-4944
请登录查看更多情报信息。
Same Patch Batch · n/a · 2011-10-09 · 42 CVEs total
| CVE-2010-4954 | xt:Commerce Gambio product_reviews_info.php products_id参数SQL注入漏洞 | |
| CVE-2010-4943 | Saurus CMS class_path参数代码注入漏洞 | |
| CVE-2010-4945 | Joomla! CamelcityDB (com_camelcitydb2)组件id参数SQL注入漏洞 | |
| CVE-2010-4946 | ALLPC product_info.php products_id参数SQL注入漏洞 | |
| CVE-2010-4947 | ALLPC advanced_search_result.php keywords参数跨站脚本漏洞 | |
| CVE-2010-4948 | PHP Free Photo Gallery script libs/adodb/adodb.inc.php path参数代码注入漏洞 | |
| CVE-2010-4949 | Joomla! FreiChat/FreiChatPure组件跨站脚本攻击漏洞 | |
| CVE-2010-4950 | TYPO3 Event (event)插件SQL注入漏洞 | |
| CVE-2010-4951 | TYPO3 xaJax Shoutbox (vx_xajax_shoutbox)插件跨站脚本攻击漏洞 | |
| CVE-2010-4952 | TYPO3 FE user statistic (festat)插件SQL注入漏洞 | |
| CVE-2010-4953 | TYPO3 JW Calendar (jw_calendar)插件未明安全漏洞 | |
| CVE-2010-4942 | E-Xoopport Samsara eCal模块lid参数SQL注入漏洞 | |
| CVE-2010-4955 | APBoard Developers APBoard board/board.php id参数SQL注入漏洞 | |
| CVE-2010-4956 | TYPO3 Questionnaire (ke_questionnaire)插件跨站脚本攻击漏洞 | |
| CVE-2010-4957 | TYPO3 Questionnaire (ke_questionnaire)插件SQL注入漏洞 | |
| CVE-2010-4958 | Prado Portal index.php page参数SQL注入漏洞 | |
| CVE-2010-4959 | Pre Projects Pre Podcast Portal password参数SQL注入漏洞 | |
| CVE-2010-4960 | TYPO3 Branchenbuch插件跨站脚本攻击漏洞 | |
| CVE-2010-4961 | TYPO3 Webkit PDFs (webkitpdf)插件SQL注入漏洞 | |
| CVE-2010-4962 | TYPO3 Webkit PDFs (webkitpdf)插件未明安全漏洞 |
Showing top 20 of 42 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2010-4944
No comments yet