First published: Tue Feb 23 2010(Updated: )
SQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
JQuarks | =0.2.2 | |
JQuarks | =0.2.3 | |
Joomla | ||
All of | ||
Any of | ||
JQuarks | =0.2.2 | |
JQuarks | =0.2.3 | |
Joomla |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0692 has a high severity rating due to its potential for remote SQL injection and arbitrary command execution.
To fix CVE-2010-0692, upgrade the IP-Tech JQuarks component to version 0.2.4 or later, or apply appropriate input validation.
CVE-2010-0692 affects versions 0.2.2 and 0.2.3 of the IP-Tech JQuarks component for Joomla!.
Yes, CVE-2010-0692 can be exploited remotely by attackers through crafted HTTP requests.
CVE-2010-0692 is a SQL injection vulnerability that allows execution of arbitrary SQL commands.