CVE-2010-0158

N/A Unknown
Published: January 06, 2010 Modified: April 23, 2026
View on NVD

Description

SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the com_content component, reachable through index.php. NOTE: the vendor disputes this report, saying: "JoomlaBamboo has investigated this report, and it is incorrect. There is no SQL injection vulnerability involving the id parameter in an article view, and there never was. JoomlaBamboo customers have no reason to be concerned about this report.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://www.exploit-db.com/exploits/10971
Source: cve@mitre.org
Exploit
http://www.securityfocus.com/bid/37579
Source: cve@mitre.org
Exploit
http://www.vupen.com/english/advisories/2010/0014
Source: cve@mitre.org
Vendor Advisory
http://packetstormsecurity.org/1001-exploits/joomlabamboo-sql.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.attrition.org/pipermail/vim/2010-February/002319.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.attrition.org/pipermail/vim/2010-February/002320.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.exploit-db.com/exploits/10971
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.securityfocus.com/bid/37579
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.vupen.com/english/advisories/2010/0014
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

12 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.6%
71th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

joomlabamboo joomla