SQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the ArticleID parameter in a comment action to index.php.
CPE | Name | Operator | Version |
---|---|---|---|
com_yvcomment | eq | 1.11 | |
com_yvcomment | eq | 1.8 | |
com_yvcomment | eq | 1.6 | |
com_yvcomment | eq | 1.9 | |
com_yvcomment | eq | 1.4 | |
com_yvcomment | eq | 1.1 | |
com_yvcomment | eq | 1.13 | |
com_yvcomment | eq | 1.12 | |
com_yvcomment | eq | 1.16 | |
com_yvcomment | eq | 1.15 |