CVE-2010-5056

SQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the face_id parameter in a show_face action to index.php.

• CWE-89

• http://packetstormsecurity.org/1004-exploits/joomlagbufacebook-sql.txt
• http://secunia.com/advisories/39487Vendor Advisory
• http://www.exploit-db.com/exploits/12299Exploit
• http://www.securityfocus.com/bid/39576Exploit
• http://www.vupen.com/english/advisories/2010/0944Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57946
• http://packetstormsecurity.org/1004-exploits/joomlagbufacebook-sql.txt
• http://secunia.com/advisories/39487Vendor Advisory
• http://www.exploit-db.com/exploits/12299Exploit
• http://www.securityfocus.com/bid/39576Exploit
• http://www.vupen.com/english/advisories/2010/0944Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57946

Published

Nov 23, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-5050Cross-site scripting (XSS) vulnerability in jsp/admin/tools/…
• CVE-2010-5051Cross-site scripting (XSS) vulnerability in admin/core/admin…
• CVE-2010-5052Cross-site scripting (XSS) vulnerability in admin/components…
• CVE-2010-5053SQL injection vulnerability in the XOBBIX (com_xobbix) compo…
• CVE-2010-5054Cross-site scripting (XSS) vulnerability in Special:Login in…
• CVE-2010-5055SQL injection vulnerability in index.php in Almnzm 2.1 allow…
• CVE-2010-5057SQL injection vulnerability in detResolucion.php in CMS Aria…
• CVE-2010-5058SQL injection vulnerability in detResolucion.php in CMS Aria…
• CVE-2010-5059SQL injection vulnerability in index.php in CMScout 2.0.8 al…
• CVE-2010-5060SQL injection vulnerability in Nus.php in NUs Newssystem 1.0…
• CVE-2010-5061SQL injection vulnerability in index.php in RSStatic allows …
• CVE-2010-5062SQL injection vulnerability in search.php in MH Products kle…