CVE-2010-4166
Last modified
CVE-2010-4166 is a vulnerability of currently unknown severity. Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via (1) the filter_order parameter in a com_weblinks category action to index.php, (2) the filter_order_Dir parameter in a com_weblinks category action to index.php, or (3) the filter_order_Dir parameter in a com_messages action to administrator/index.php.. EPSS estimates a 1.42% chance of exploitation in the next 30 days.
Description
Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via (1) the filter_order parameter in a com_weblinks category action to index.php, (2) the filter_order_Dir parameter in a com_weblinks category action to index.php, or (3) the filter_order_Dir parameter in a com_messages action to administrator/index.php.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Joomla | Joomla\! | 1.5.0 |
| Joomla | Joomla\! | 1.5.1 |
| Joomla | Joomla\! | 1.5.2 |
| Joomla | Joomla\! | 1.5.3 |
| Joomla | Joomla\! | 1.5.4 |
| Joomla | Joomla\! | 1.5.5 |
| Joomla | Joomla\! | 1.5.6 |
| Joomla | Joomla\! | 1.5.7 |
| Joomla | Joomla\! | 1.5.8 |
| Joomla | Joomla\! | 1.5.9 |
| Joomla | Joomla\! | 1.5.10 |
| Joomla | Joomla\! | 1.5.11 |
| Joomla | Joomla\! | 1.5.12 |
| Joomla | Joomla\! | 1.5.13 |
| Joomla | Joomla\! | 1.5.14 |
| Joomla | Joomla\! | 1.5.15 |
| Joomla | Joomla\! | 1.5.16 |
| Joomla | Joomla\! | 1.5.17 |
| Joomla | Joomla\! | 1.5.18 |
| Joomla | Joomla\! | 1.5.19 |
| Joomla | Joomla\! | 1.5.20 |
| Joomla | Joomla\! | 1.5.21 |
References
- http://secunia.com/advisories/42133Vendor Advisory
- http://secunia.com/advisories/42133Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-4166?
How severe is CVE-2010-4166?
How do I fix CVE-2010-4166?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-4160Multiple integer overflows in the (1) pppol2tp_sendmsg funct…
- CVE-2010-4161The udp_queue_rcv_skb function in net/ipv4/udp.c in a certai…
- CVE-2010-4162Multiple integer overflows in fs/bio.c in the Linux kernel b…
- CVE-2010-4163The blk_rq_map_user_iov function in block/blk-map.c in the L…
- CVE-2010-4164Multiple integer underflows in the x25_parse_facilities func…
- CVE-2010-4165The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linu…
- CVE-2010-4167Untrusted search path vulnerability in configure.c in ImageM…
- CVE-2010-4168Multiple use-after-free vulnerabilities in OpenTTD 1.0.x bef…7.5
- CVE-2010-4169Use-after-free vulnerability in mm/mprotect.c in the Linux k…
- CVE-2010-4170The staprun runtime tool in SystemTap 1.3 does not properly …
- CVE-2010-4171The staprun runtime tool in SystemTap 1.3 does not verify th…
- CVE-2010-4172Multiple cross-site scripting (XSS) vulnerabilities in the M…
Are you affected by CVE-2010-4166?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST