CVE-2010-4898

HIGH 7.5CVE-2010-4898 · Published 08/10/2011 · updated 16/06/2026

In short

CVE-2010-4898 is a HIGH (CVSS 7.5) vulnerability affecting com gantry (gantry-framework).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
com gantry gantry-framework	`= 3.0.10`	No fix yet

Description

SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php.

References

osvdb.org/67825
secunia.com/advisories/41300 · Vendor Advisory
exploit-db.com/exploits/14911 · Exploit
gantry-framework.org/news/70-joomla-version-3011-released
securityfocus.com/bid/43017

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free