CVE-2010-1721 - SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties action to index.php

Back Back to CVE browser

HIGH

SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties action to index.php

Published May 4, 2010

7.5

HIGH

CVSS 2.0

EPSS 1.20%

Description

SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties action to index.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (7)

http://extensions.thethinkery.net/
x_refsource_MISC
http://osvdb.org/63750
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/39427
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/12246
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/39495
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1741
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/57875
vdb-entryx_refsource_XF

Link	Providers	Tags
http://extensions.thethinkery.net/		x_refsource_MISC
http://osvdb.org/63750		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/39427		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/12246		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/39495		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1741		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/57875		vdb-entryx_refsource_XF