CVE-2010-4992

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.04%

Published

Nov 1, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBJoomla! Component PaymentsPlus 2.1.5 - Blind SQL Injection TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the type parameter to add.html.

Weaknesses (CWE)

CWE-89

Affected Products (2)

paymentsplus · payments_plusvulnerable

joomla · joomla\!

References (10)

http://packetstormsecurity.org/1007-exploits/joomlapaymentsplus-sql.txt

Exploit

http://securityreason.com/securityalert/8497

http://www.exploit-db.com/exploits/14265

Exploit

http://www.securityfocus.com/bid/41458

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/60166

http://packetstormsecurity.org/1007-exploits/joomlapaymentsplus-sql.txt

Exploit

http://securityreason.com/securityalert/8497

http://www.exploit-db.com/exploits/14265

Exploit

http://www.securityfocus.com/bid/41458

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/60166

KEV Catalog EPSS Scores Vendors All CVEs