CVEs-PoC/2010/CVE-2010-1873.md

CVE-2010-1873

Description

SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information.

POC

Reference

• http://packetstormsecurity.org/1004-exploits/joomlajvehicles-sql.txt
• http://www.exploit-db.com/exploits/12190

Github

• https://github.com/ARPSyndicate/kenzer-templates