CVE-2007-2933

The CVE-2007-2933 entry describes an SQL injection in the Phil-a-Form (com_philaform) Joomla! component. Affected version: 1.2.0.0 and earlier. Vulnerable component is index.php where attacker-supplied form_id can be used to inject and execute arbitrary SQL commands remotely. Impact as stated: pa...

CVE-2007-2933

SQL injection vulnerability in index.php in the Phil-a-Form comphilaform 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the formid parameter...