CVE-2010-2851: SQL Injection

Published Jul 23, 2010

Updated

SQL injection vulnerability in the BookLibrary From Same Author (combooklibrary) module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.

Affected Software

2 affected components

Ordasoft Com Booklibrary=1.5

Joomla Joomla\!

Event History

Jul 23, 2010

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Jul 25, 2010

Data Sourced

02:04 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2851?

CVE-2010-2851 is classified as a high severity vulnerability due to its ability to allow remote attackers to execute arbitrary SQL commands.

How do I fix CVE-2010-2851?

To fix CVE-2010-2851, update the BookLibrary From Same Author module to the latest version or apply relevant security patches if available.

Which Joomla versions are affected by CVE-2010-2851?

CVE-2010-2851 specifically affects the BookLibrary From Same Author module version 1.5 and possibly earlier.

What types of attacks can be executed due to CVE-2010-2851?

Due to CVE-2010-2851, attackers can execute SQL injection attacks to manipulate the database and access sensitive information.

Is CVE-2010-2851 a client-side or server-side vulnerability?

CVE-2010-2851 is a server-side vulnerability, as it targets the SQL backend of the affected Joomla module.