CVE-2010-4904

Vulnerability

A SQL injection vulnerability exists in the Aardvertiser component (com_aardvertiser) for Joomla! versions 2.1 and 2.1.1 [1]. The flaw is located in the cat_name parameter when a view action is performed on index.php. No special configuration is required; the vulnerable code path is reachable by any remote user who can send HTTP requests to the Joomla! instance.

Exploitation

An attacker can exploit this vulnerability remotely without authentication. By crafting a malicious cat_name parameter in a GET request to index.php?option=com_aardvertiser&view=...&cat_name=[payload], the attacker can inject arbitrary SQL commands. No user interaction or special network position is required beyond standard internet access.

Impact

Successful exploitation allows the attacker to execute arbitrary SQL commands against the underlying database. This can lead to unauthorized disclosure of sensitive data (e.g., user credentials, session tokens), modification or deletion of database content, and potentially full compromise of the Joomla! application and its data.

Mitigation

As of the available references, no official patch or fixed version has been disclosed [1]. Users are advised to disable or remove the Aardvertiser component until a security update is released. The component may be end-of-life; consider migrating to an alternative solution.