CVE-2007-2792

CVE-2007-2792 affects the YaNC (com_yanc) Newsletter component for Mambo/Joomla! prior to 1.5 beta 3. The vulnerability is a SQL injection in the listid parameter (index.php / yanc.html.php showPageHeader), allowing remote attackers to manipulate database queries and potentially disclose or modif...