SQL Injection in Harmistechnology Com Jeauto

CVE-2010-4517

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php.

Vulnerability class: SQL Injection

EPSS: 0.008 (53.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References