First published: Wed Nov 02 2011(Updated: )
SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
harmistechnology com jejob | =1.0 | |
Joomla |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-5028 is classified as a critical SQL injection vulnerability that can allow remote attackers to execute arbitrary SQL commands.
To fix CVE-2010-5028, you should upgrade the JExtensions JE Job component to a version that is not affected, ideally to the latest available version.
CVE-2010-5028 specifically affects the JExtensions JE Job component version 1.0 for Joomla!.
Yes, CVE-2010-5028 can be exploited remotely by attackers through the catid parameter in item actions.
CVE-2010-5028 impacts systems running Joomla! with the JExtensions JE Job 1.0 component installed.