Joomla com_eventlist plugin 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comeventlist plugin. An attacker can exploit the vulnerability to access or modify database data...

CVE-2007-4509

CVE-2007-4509 describes a SQL injection in Joomla!’s EventList component (com_eventlist) versions 0.8 and earlier. The vulnerability arises in the index.php file when processing the details action with theDid parameter, allowing remote attackers to execute arbitrary SQL commands. Impact and remed...