A SQL injection vulnerability exists in Joomla! Component Ek Rishta 2.10, which allows an attacker to inject malicious SQL queries into the application. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. The vulnerability is due to insufficient sanitization of user-supplied input in the 'cid' parameter of the 'user_detail' view. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing malicious SQL code to the vulnerable application. This can result in the execution of arbitrary SQL commands in the back-end database, allowing an attacker to gain access to sensitive data.