CVE-2010-1477

2010-04-19T19:30:00
ID CVE-2010-1477
Type cve
Reporter cve@mitre.org
Modified 2010-06-11T04:00:00

Description

SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a latest_sermons action to index.php.