SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php.
                
            References
                    | Link | Resource | 
|---|---|
| http://www.exploit-db.com/exploits/15714 | Exploit | 
Configurations
                    Configuration 1 (hide)
| AND | 
                                
                                
 
  | 
                        
Information
                Published : 2010-12-09 13:00
Updated : 2010-12-09 21:00
NVD link : CVE-2010-4517
Mitre link : CVE-2010-4517
JSON object : View
CWE
                
                    
                        
                        CWE-89
                        
            Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
                joomla
- joomla\!
 
harmistechnology
- com_jeauto
 


