CVE-2010-4968: SQL Injection
Published Nov 1, 2011
·Updated
SQL injection vulnerability in the webmaster-tips.net Flash Gallery (comwmtpic) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
Affected Software
2 affected components
webmaster-tips Com Wmtpic=1.0
Joomla Joomla\!
Event History
Nov 1, 2011
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
10:55 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-4968?
The severity of CVE-2010-4968 is classified as high due to the potential for unauthorized SQL command execution.
2
How do I fix CVE-2010-4968?
To fix CVE-2010-4968, it is recommended to update the com_wmtpic component to a version that addresses this SQL injection vulnerability.
3
What systems are affected by CVE-2010-4968?
CVE-2010-4968 affects Joomla! installations using the com_wmtpic component version 1.0.
4
Can CVE-2010-4968 be exploited remotely?
Yes, CVE-2010-4968 can be exploited remotely by attackers via the Itemid parameter in the index.php file.
5
What is the nature of the vulnerability in CVE-2010-4968?
CVE-2010-4968 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.