CVE-2008-2632: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the acctexp comacctexp component 0.12.x and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the usage parameter in a subscribe action to index.php...

CVE-2008-2632

CVE-2008-2632 affects the Joomla! acctexp (com_acctexp) component up to version 0.12.x. The flaw is an SQL injection in the usage parameter of the subscribe action to index.php, enabling remote attackers to execute arbitrary SQL commands. Impact is described in the standard metrics as partial con...