cve/2016/CVE-2016-10114.md

### [CVE-2016-10114](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10114)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch.

### POC

#### Reference
- https://github.com/qemm/joomlasqli
- https://www.exploit-db.com/exploits/40973/

#### Github
No PoCs found on GitHub currently.