CVE-2009-1263

CVE-2009-1263 describes an SQL injection in the Joomla! extension component com_bookjoomlas (BookJoomlas) 0.1 . The vulnerability is in the file sub_commententry.php via the parameter gbid used in a comment action to index.php, enabling remote attackers to execute arbitrary SQL commands. Affected...