CVE-2010-2147

Cross-site scripting (XSS) vulnerability in the My Car (com_mycar) component 1.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the modveh parameter to index.php.

• CWE-79

• http://osvdb.org/65000Exploit
• http://secunia.com/advisories/39983Vendor Advisory
• http://www.exploit-db.com/exploits/12779Exploit
• http://www.securityfocus.com/bid/40430Exploit
• http://www.vupen.com/english/advisories/2010/1271Vendor Advisory
• http://www.xenuser.org/documents/security/joomla_com_mycar_multiple_vulnerabilities.txtExploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58976
• http://osvdb.org/65000Exploit
• http://secunia.com/advisories/39983Vendor Advisory
• http://www.exploit-db.com/exploits/12779Exploit
• http://www.securityfocus.com/bid/40430Exploit
• http://www.vupen.com/english/advisories/2010/1271Vendor Advisory
• http://www.xenuser.org/documents/security/joomla_com_mycar_multiple_vulnerabilities.txtExploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58976

Published

Jun 3, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2141SQL injection vulnerability in index.php in NITRO Web Galler…
• CVE-2010-2142SQL injection vulnerability in default.asp in Cyberhost allo…
• CVE-2010-2143Directory traversal vulnerability in index.php in Symphony C…
• CVE-2010-2144Cross-site scripting (XSS) vulnerability in signinform.php i…
• CVE-2010-2145Multiple PHP remote file inclusion vulnerabilities in ClearS…
• CVE-2010-2146PHP remote file inclusion vulnerability in banned.php in Vis…
• CVE-2010-2148SQL injection vulnerability in the My Car (com_mycar) compon…
• CVE-2010-2149Session fixation vulnerability in Fujitsu e-Pares V01 L01, L…
• CVE-2010-2150Cross-site scripting (XSS) vulnerability Fujitsu e-Pares V01…
• CVE-2010-2151Cross-site request forgery (CSRF) vulnerability in Fujitsu e…
• CVE-2010-2152Unspecified vulnerability in JustSystems Ichitaro 2004 throu…
• CVE-2010-2153Unrestricted file upload vulnerability in admin/code/tce_fun…