SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla!
Date: 2010-05
Affected: jvehicles/com_jvehicles, joomla/joomla\!
Attack vector: sql-injection
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2010-1873
CWE: CWE-89
CVSS: 7.5 ()

SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information.


Mitigations:

Architectural layers (MAESTRO):