CVE-2010-1739: SQL Injection
Published May 6, 2010
·Updated
SQL injection vulnerability in the Newsfeeds (comnewsfeeds) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the feedid parameter in a categories action to index.php.
Affected Software
4 affected components
Joomla Com Newsfeeds
Joomla Joomla\!
All of the following
Joomla Com Newsfeeds
Joomla Joomla\!
Event History
May 6, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·06:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1739?
CVE-2010-1739 has a medium severity rating due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2010-1739?
To fix CVE-2010-1739, update the com_newsfeeds component to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2010-1739?
CVE-2010-1739 affects Joomla! installations using the com_newsfeeds component prior to the security fix.
4
What types of attacks can be executed through CVE-2010-1739?
Attackers can execute arbitrary SQL commands through the feedid parameter in the categories action of index.php.
5
When was CVE-2010-1739 disclosed?
CVE-2010-1739 was disclosed in April 2010.