Sql injection

Multiple SQL injection vulnerabilities in the Rapid Recipe comrapidrecipe 1.6.5 and earlier component for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 userid or 2 categoryid parameter. NOTE: this might overlap CVE-2008-0754...

CVE-2008-0754

CVE-2008-0754 describes multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla!. The flaws allow remote attackers to execute arbitrary SQL commands via (1) user_id in a showuser action or (2) category_id in a viewcategorysrecipes action. Connected ...