PT-2011-1670 · Jextensions · Jextensions Je Auto

Published 2011-02-01 · Updated 2011-02-15 · CVE-2010-4720

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JExtensions JE Auto (com jeauto) version 1.1 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This is related to the view item page, although the specific vectors are not specified.

Recommendations For versions 1.1 and earlier, update to a version later than 1.1 to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2010-4720

Affected Products

Jextensions Je Auto

References · 5

• http://secunia.com/advisories/42616 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4720 · Security Note
• http://securityfocus.com/bid/45366 · Note
• http://joomlaextensions.co.in/extensions/components/je-auto.html · Note
• http://osvdb.org/69791 · Note