cve/2010/CVE-2010-4902.md

CVE-2010-4902

Description

Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) squad or (2) showgame parameter to index.php.

POC

Reference

• http://packetstormsecurity.org/1009-exploits/joomlaclantools-sql.txt
• http://securityreason.com/securityalert/8440

Github

No PoCs found on GitHub currently.