CVE-2010-10003

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

A vulnerability classified as critical was found in gesellix titlelink on Joomla. Affected by this vulnerability is an unknown functionality of the file plugin_content_title.php. The manipulation of the argument phrase leads to sql injection. The patch is named b4604e523853965fa981a4e79aef4b554a535db0. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217351.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
gesellix	titlelink	n/a

References

https://github.com/gesellix/titlelink/commit/b4604e523853965fa981a4e79aef4b554a535db0Patch, Third Party Advisory
https://vuldb.com/?ctiid.217351Third Party Advisory
https://vuldb.com/?id.217351Third Party Advisory
https://github.com/gesellix/titlelink/commit/b4604e523853965fa981a4e79aef4b554a535db0Patch, Third Party Advisory
https://vuldb.com/?ctiid.217351Third Party Advisory
https://vuldb.com/?id.217351Third Party Advisory

Timeline

Published: Jan 4, 2023
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-100046.1A vulnerability was found in Information Cards Module on simpleSAMLphp and classified as problematic. This issue affects some unknown proces CVE-2010-100062.6A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the fi CVE-2010-100079.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in lierdakil click-reminder. It has been rated as critical. This issue affects the CVE-2010-100085.4** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been decl CVE-2010-100099.8A vulnerability was found in frioux ptome. It has been rated as critical. This issue affects some unknown processing. The manipulation leads CVE-2010-100106.1A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a. This affects an unknown part of the fil CVE-2010-100117.5A vulnerability, which was classified as problematic, was found in Acritum Femitter Server 1.04. Affected is an unknown function. The manipu CVE-2010-100128.7A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to CVE-2010-100139.3An unauthenticated remote command execution vulnerability exists in AjaXplorer (now known as Pydio Cells) versions prior to 2.6. The flaw re CVE-2010-100148.7Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST co CVE-2010-100158.4AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos.Playlist CVE-2010-1001610.0BS.Player version 2.57 (build 1051) contains a vulnerability in its playlist import functionality. When processing .m3u files, the applicati