PT-2023-9887 · Unknown · Gesellix Titlelink

Published 2023-01-04 · Updated 2024-05-17 · CVE-2010-10003

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gesellix titlelink (affected versions not specified)

Description A critical issue was found in gesellix titlelink on Joomla, affecting an unknown functionality of the file plugin content title.php. The manipulation of the phrase argument leads to SQL injection.

Recommendations Apply a patch to fix this issue. The patch is named b4604e523853965fa981a4e79aef4b554a535db0. As a temporary workaround, consider restricting access to the plugin content title.php file until the patch is applied.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2010-10003

Affected Products

Gesellix Titlelink

References · 5

• https://github.com/gesellix/titlelink/commit/b4604e523853965fa981a4e79aef4b554a535db0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-10003 · Security Note
• https://vuldb.com/?ctiid.217351 · Note
• https://t.me/cibsecurity/55857 · Telegram Post
• https://vuldb.com/?id.217351 · Note