Unscored CVE-2010-2851 EUVD-2010-2855GHSA-p8ff-7f8p-6244

SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote…

Published Jul 23, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.

References

65996 vdb-entry
http://secunia.com/secunia_research/2010-83/
booklibrary-id-sql-injection(60107) vdb-entry
41350 vdb-entry
40130 third-party-advisory
ADV-2010-1707 vdb-entry
20100705 Secunia Research: Joomla BookLibrary From Same Author Module "id" SQL Injection mailing-list