CVE-2010-5044: SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla!

Security readout for executives and security teams

This affects Joomla! sites that installed Search Log (com_searchlog) 3.1.0. An authenticated user with Public Back-end privileges could abuse the administrative log action to run SQL against the site database. Business impact depends on stored data, database permissions, and whether exposed backend accounts exist. Exposure is likely limited to Joomla! deployments with the Search Log component version 3.1.0 installed and reachable administrative functionality. The attacker must be authenticated with Public Back-end privileges, based on the CVE description. Prioritize investigation for any internet-facing Joomla! administration portals or sites storing sensitive data. The issue is old and authenticated, but arbitrary SQL can affect confidentiality and integrity. Urgency is lower where the component is absent, admin access is restricted, or no backend accounts are exposed. Mitigation focus: Inventory Joomla! sites for Search Log component 3.1.0.; Restrict Joomla! administrator access to trusted networks and users.; Review vendor or component maintainer guidance for fixed versions or removal advice..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.