CVE-2010-4865

CVE Descriptions

SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-89	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	7.5		AV:N/AC:L/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	2.8%	–	–
2022-03-13	–	–	2.8%	–	–
2022-04-03	–	–	2.8%	–	–
2022-04-17	–	–	2.8%	–	–
2022-10-16	–	–	2.8%	–	–
2023-01-01	–	–	2.8%	–	–
2023-01-08	–	–	2.8%	–	–
2023-03-12	–	–	–	0.24%	–
2023-06-04	–	–	–	0.24%	–
2023-07-09	–	–	–	0.2%	–
2023-10-15	–	–	–	0.2%	–
2023-10-29	–	–	–	0.16%	–
2023-11-05	–	–	–	0.16%	–
2023-12-03	–	–	–	0.16%	–
2023-12-17	–	–	–	0.16%	–
2024-01-07	–	–	–	0.16%	–
2024-01-14	–	–	–	0.16%	–
2024-02-11	–	–	–	0.16%	–
2024-03-03	–	–	–	0.16%	–
2024-06-02	–	–	–	0.16%	–
2024-11-17	–	–	–	0.16%	–
2024-12-22	–	–	–	0.39%	–
2025-03-09	–	–	–	0.39%	–
2025-01-19	–	–	–	0.39%	–
2025-03-09	–	–	–	0.39%	–
2025-03-18	–	–	–	–	0.51%
2025-03-18	–	–	–	–	0.51,%

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Date	Percentile
2022-02-06	64%
2022-03-13	65%
2022-04-03	81%
2022-04-17	82%
2022-10-16	83%
2023-01-01	82%
2023-01-08	83%
2023-03-12	6%
2023-06-04	61%
2023-07-09	57%
2023-10-15	58%
2023-10-29	52%
2023-11-05	53%
2023-12-03	52%
2023-12-17	53%
2024-01-07	52%
2024-01-14	53%
2024-02-11	51%
2024-03-03	52%
2024-06-02	53%
2024-11-17	54%
2024-12-22	73%
2025-03-09	74%
2025-01-19	73%
2025-03-09	74%
2025-03-18	64%
2025-03-18	64%

Exploit information

Exploit Database EDB-ID : 15157

Publication date : 2010-09-29 22h00 +00:00
Author : Salvatore Fresta
EDB Verified : Yes

JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities Name JE Guestbook Vendor http://www.joomlaextensions.co.in Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta [at] gmail [dot] com Date 2010-09-30 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III. ANALYSIS IV. SAMPLE CODE V. FIX I. ABOUT THE APPLICATION ________________________ JE Guest Component is an open source Joomla guestbook component with spam protection and many customization options. II. DESCRIPTION _______________ Some parameters are not properly sanitised. III. ANALYSIS _____________ Summary: A) Local File Inclusion B) Multiple Blind SQL Injection A) Local File Inclusion _______________________ Input passed to the "view" parameter in jeguestbook.php (when option is set to com_jeguestbook) is not properly verified before being used to include files. This can be exploited to include arbitrary files from local resources via directory traversal attacks and URL-encoded NULL bytes. B) Multiple Blind SQL Injection _______________________________ Many parameters are not properly sanitised before being used in SQL queries.This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. IV. SAMPLE CODE _______________ A) Local File Inclusion http://site/path/index.php?option=com_jeguestbook&view=../../../../../../../../etc/passwd%00 B) Multiple Blind SQL Injection http://site/path/index.php?option=com_jeguestbook&view=item_detail&d_itemid=-1 OR (SELECT(IF(0x41=0x41, BENCHMARK(999999999,NULL),NULL))) V. FIX ______ No fix.