Com Ccinvoices CVE-2010-4853 SQL-Injection Vulnerability

Bugtraq ID:	73548
Class:	Input Validation Error
CVE:	CVE-2010-4853
Remote:	Yes
Local:	No
Published:	Oct 05 2011 12:00AM
Updated:	Oct 05 2011 12:00AM
Credit:	Unknown
Vulnerable:	Chillcreations Com Ccinvoices 0
Not Vulnerable:

Com Ccinvoices CVE-2010-4853 SQL-Injection Vulnerability

Com Ccinvoices is prone to a sql-injection vulnerability. SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php.

Com Ccinvoices CVE-2010-4853 SQL-Injection Vulnerability

Attackers can use a browser to exploit this issue.

Com Ccinvoices CVE-2010-4853 SQL-Injection Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]

Com Ccinvoices CVE-2010-4853 SQL-Injection Vulnerability

References:

• http://packetstormsecurity.org/1011-exploits/joomlaccinvoices-sql.txt (MISC)
  
• IBM X-Force Exchange Beta (XF)
  
• Joomla ccInvoices Component (com_ccinvoices) SQL Injection Vulnerability (EXPLOIT-DB)
  
• Joomla Component ccinvoices SQL Injection Vulnerability - CXSecurity.com (SREASON)