Vulnerabilities

TI-2010-02414 CVE-2010-2515 · GHSA-mv8x-vqf4-gf69

Multiple SQL injection vulnerabilities in index.php in the JFaq (com_jfaq) component 1.2…

LOW 33

Multiple SQL injection vulnerabilities in index.php in the JFaq (com_jfaq) component 1.2 for Joomla!, when magic_quotes_gpc is disabled, allow (1) remote attackers to execute arbitrary SQL commands via the id parameter,…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0169 Published 2010-06-28 No fix listed CWE-89

TI-2010-02413 CVE-2010-2514 · GHSA-mw2x-vj4g-jgwf

Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) component 1.2 for Joomla!…

LOW 22

Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the question parameter in an add2 action to index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01075 Published 2010-06-28 No fix listed CWE-79

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in index.php in the JFaq (com_jfaq) component 1.2…

Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) component 1.2 for Joomla!…