CVE-2010-2909

SQL injection vulnerability in ttvideo.php in the TTVideo (com_ttvideo) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a video action to index.php.

• CWE-89

• http://adv.salvatorefresta.net/TTVideo_1.0_Joomla_Component_SQL_Injection_Vulnerability-27072010.txtExploit
• http://osvdb.org/66630Exploit
• http://secunia.com/advisories/40716Vendor Advisory
• http://www.exploit-db.com/exploits/14481Exploit
• http://www.securityfocus.com/archive/1/512685/100/0/threaded
• http://www.securityfocus.com/archive/1/512709/100/0/threaded
• http://www.toughtomato.com/downloads/16-comttvideo-1-0-1/fileURL Repurposed
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60662
• http://adv.salvatorefresta.net/TTVideo_1.0_Joomla_Component_SQL_Injection_Vulnerability-27072010.txtExploit
• http://osvdb.org/66630Exploit
• http://secunia.com/advisories/40716Vendor Advisory
• http://www.exploit-db.com/exploits/14481Exploit
• http://www.securityfocus.com/archive/1/512685/100/0/threaded
• http://www.securityfocus.com/archive/1/512709/100/0/threaded
• http://www.toughtomato.com/downloads/16-comttvideo-1-0-1/fileURL Repurposed
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60662

Published

Jul 28, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2903Google Chrome before 5.0.375.125 performs unexpected truncat…
• CVE-2010-2904Multiple cross-site scripting (XSS) vulnerabilities in the S…
• CVE-2010-2905SQL injection vulnerability in info.php in ScriptsFeed and B…
• CVE-2010-2906SQL injection vulnerability in articlesdetails.php in Script…
• CVE-2010-2907SQL injection vulnerability in the Huru Helpdesk (com_huruhe…
• CVE-2010-2908SQL injection vulnerability in the Joomdle (com_joomdle) com…
• CVE-2010-2910SQL injection vulnerability in the Ozio Gallery (com_oziogal…
• CVE-2010-2911SQL injection vulnerability in index.php in Kayako eSupport …
• CVE-2010-2912SQL injection vulnerability in index.php in Kayako eSupport …
• CVE-2010-2913The Citibank Citi Mobile app before 2.0.3 for iOS stores acc…
• CVE-2010-2914Cross-site scripting (XSS) vulnerability in nessusd_www_serv…
• CVE-2010-2915SQL injection vulnerability in welcome.php in AJ Square AJ H…