CVE-2010-4926

no score yetEPSS 1.2%

SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ct_id parameter in a timetrack action to index.php.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2011-10-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

timetrack:com_timetrack

References

http://packetstormsecurity.org/1009-exploits/joomlatimetrack-sql.txt
http://salvatorefresta.net/files/adv/TimeTrack_1.2.4_Joomla_Component_Multiple_SQL_Injection_Vulnerabilities-22092010.txt
http://secunia.com/advisories/41583
http://securityreason.com/securityalert/8454
http://timetrack.itrn.de/

Check your stack JSON