joomla component com_ewriting parameters cat SQL injection vulnerability

No description provided by source...

CVE-2008-1297: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the eWriting comewriting 1.2.1 module for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action...

Joomla!/Mambo 'com_ewriting' 'Itemid'SQL注入漏洞

BUGTRAQ ID: 28179 CNCAN ID:CNCAN-2008031107 Joomla!/Mambo 'comewriting'是一款基于PHP的WEB应用程序。 Joomla!/Mambo 'comewriting'不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'itemid'参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Meclazcke eWriting 1.2.1 目前没有详细解决方案提供：...

Mambo Component eWriting 1.2.1 (cat) SQL Injection Vulnerability

No description provided by source. eWriting 1.2.1 - SQL injection Discovered by breakerunit & Don BHack b4lc4n.org Gretz to h4cky0u.org l r00tsecurity.org l h4cky0u.biz l Dorks: "Powered by eWriting 1.2.1 allinurl:"comewriting" Joomla!...