« Volver al listado

CVE-2010-4696

Estado: ModificadaAlta (7.5)—

Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the (1) filter_order or (2) filter_order_Dir parameter in a com_contact action to index.php, a different vulnerability than CVE-2010-4166. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Joomla — Joomla!

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-4696",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-01-18T18:03:08.113",
  "references": [
    {
      "url": "http://developer.joomla.org/security/news/9-security/10-core-security/323-20101101-core-sqli-info-disclosurevulnerabilities.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2010/11/12/5",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2010/11/12/6",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/42133",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://developer.joomla.org/security/news/9-security/10-core-security/323-20101101-core-sqli-info-disclosurevulnerabilities.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2010/11/12/5",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2010/11/12/6",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/42133",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the (1) filter_order or (2) filter_order_Dir parameter in a com_contact action to index.php, a different vulnerability than CVE-2010-4166.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de inyección SQL en Joomla! v1.5.x anterior a v1.5.22 permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) filter_order o (2) filter_order_Dir en una acción com_contact a index.php, una vulnerabilidad diferente de CVE-2010-4166. NOTA: la procedencia de esta información es desconocida, los detalles han sido obtenidos exclusivamente de la información de terceros."
    }
  ],
  "lastModified": "2026-06-16T23:25:22.013",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65184BFE-A070-4099-B672-3A238E9F83EF"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "920129E4-F979-49B5-9B96-62BCBC3954D5"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1313BEAD-C0C0-4D8C-A3AA-F514BA6A1C92"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A90A8900-E441-46C4-A725-BA312358760E"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E74E276C-C62D-4828-89CB-80F526FEAEA5"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F370EA7F-3719-4D35-A7FD-C7AD1BD709D5"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4E48636-9EDB-49BB-ABC8-D79864BFCB38"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "580712F4-E97C-4E3F-BF9D-3445BEB4C3FE"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "466E5E84-4C69-49F2-83DA-FC86202DB7F4"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB968DF7-4A0B-474C-8639-06976837E03D"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B6BE010-649F-4E48-97DC-DDF7511406D5"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B8C4094-D028-4A55-B523-C90F5A4C9D82"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69FA6550-2135-4D41-B592-433FFFDEE180"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C73D78E0-BF24-433B-9F1B-03FD956C5779"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9BAC75B-DAC1-47E1-B9C9-48CF19489143"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BA97C8A-809D-44FC-95D2-5F269B6BF77D"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.15:rc:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A9F607CF-AC49-4B13-96E5-B44191108CDA"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "883B3DC0-6D6C-4C21-BC2A-EE53C140D817"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7CFCF0F-BCD9-4215-817A-1409EA00CCBA"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D5CB72A-9B5F-42B2-BEE1-3F92C04FB335"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FDBBD33-63E0-4377-95ED-45FAA1EED3E7"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34B39FD1-44E2-43EC-B393-99E6208622B5"
            },
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:1.5.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F77BABA-7768-4F92-84C7-D247E4772749"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}