VulnerabilityModified
CVE-2010-2254
SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php.
HIGH 7.5EPSS 0.97%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.97%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.97% probability · 60th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- shape5/bridge of hope template
- Source
- cve@mitre.org
References
- http://packetstormsecurity.org/1001-exploits/joomlaboh-sql.txtExploit
- http://www.exploit-db.com/exploits/10964Exploit
- http://www.securityfocus.com/bid/37602
- http://www.vupen.com/english/advisories/2010/0019Vendor Advisory
- http://packetstormsecurity.org/1001-exploits/joomlaboh-sql.txtExploit
- http://www.exploit-db.com/exploits/10964Exploit
- http://www.securityfocus.com/bid/37602
- http://www.vupen.com/english/advisories/2010/0019Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.