CVE-2010-4853

CVE-2010-4853 describes a SQL injection vulnerability in the Joomla! extension ccInvoices (com_ccinvoices). The issue arises from the id parameter in the viewInv action of index.php, allowing remote attackers to manipulate SQL queries. Affected software is Joomla! component ccInvoices; the vulner...