CVE-2010-0461: SQL Injection
Published Jan 28, 2010
·Updated
SQL injection vulnerability in the casino (comcasino) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) category or (2) player action to index.php.
Affected Software
4 affected components
Joomla Com Casino=1.0
Joomla joomla
All of the following
Joomla Com Casino=1.0
Joomla joomla
Event History
Jan 28, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
08:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·08:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0461?
CVE-2010-0461 has a medium severity rating due to its potential for SQL injection attacks.
2
How do I fix CVE-2010-0461?
To fix CVE-2010-0461, you should upgrade the com_casino component to a version that patches this vulnerability.
3
What are the potential impacts of CVE-2010-0461?
The impacts of CVE-2010-0461 include unauthorized access to the database and executing arbitrary SQL commands.
4
Which versions of Joomla! are affected by CVE-2010-0461?
CVE-2010-0461 specifically affects Joomla! with the com_casino component version 1.0.
5
Who can exploit CVE-2010-0461?
CVE-2010-0461 can be exploited by remote attackers with knowledge of the ID parameter in category or player actions.