SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla!
Date: 2010-05
Affected: com-property/com_properties, joomla/joomla\!
Attack vector: sql-injection
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2010-1874
CWE: CWE-89
CVSS: 7.5 ()

SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information.


Mitigations:

Architectural layers (MAESTRO):