CVE-2010-2851
SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and...
SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.
- Record
CVE-2010-2851- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.
- Record
CVE-2010-2851- Updated
- 2026-11-02
EUVDEUVD-2010-2855 No score
SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.
- Record
EUVD-2010-2855- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p8ff-7f8p-6244 No score
SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and...
SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.
- Record
GHSA-p8ff-7f8p-6244- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2851 is a high vulnerability (CVSS 7.5) in Ordasoft Com Booklibrary, published July 23, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.30%, the 70th percentile. No source names a fixed version.
References
osvdb.org/65996
secunia.com/secunia_research/2010-83
exchange.xforce.ibmcloud.com/vulnerabilities/60107
securityfocus.com/bid/41350
vupen.com/english/advisories/2010/1707
nvd.nist.gov/vuln/detail/CVE-2010-2851
github.com/advisories/GHSA-p8ff-7f8p-6244