CVE-2010-1468

SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) component 1.5.2 Stable Update 3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the mid parameter in a menu_display action to index.php.

• CWE-89

• http://packetstormsecurity.org/1004-exploits/joomlamvrmm-sql.txtExploit
• http://secunia.com/advisories/39217Vendor Advisory
• http://www.exploit-db.com/exploits/12159Exploit
• http://www.securityfocus.com/bid/39382Exploit
• http://www.xenuser.org/documents/security/joomla_com_MVRMM_sql.txtExploit
• http://packetstormsecurity.org/1004-exploits/joomlamvrmm-sql.txtExploit
• http://secunia.com/advisories/39217Vendor Advisory
• http://www.exploit-db.com/exploits/12159Exploit
• http://www.securityfocus.com/bid/39382Exploit
• http://www.xenuser.org/documents/security/joomla_com_MVRMM_sql.txtExploit

Published

Apr 19, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1462Directory traversal vulnerability in WebAsyst Shop-Script FR…
• CVE-2010-1463Multiple SQL injection vulnerabilities in WebAsyst Shop-Scri…
• CVE-2010-1464Multiple cross-site scripting (XSS) vulnerabilities in WebAs…
• CVE-2010-1465Stack-based buffer overflow in Trellian FTP client 3.01, inc…
• CVE-2010-1466Directory traversal vulnerability in scr/soustab.php in open…
• CVE-2010-1467Multiple PHP remote file inclusion vulnerabilities in openUr…
• CVE-2010-1469Directory traversal vulnerability in the Ternaria Informatic…
• CVE-2010-1470Directory traversal vulnerability in the Web TV (com_webtv) …
• CVE-2010-1471Directory traversal vulnerability in the AddressBook (com_ad…
• CVE-2010-1472Directory traversal vulnerability in the Daily Horoscope (co…
• CVE-2010-1473Directory traversal vulnerability in the Advertising (com_ad…
• CVE-2010-1474Directory traversal vulnerability in the Sweety Keeper (com_…