CVE-2009-2014

CVE-2009-2014 affects the ComSchool (com_school) Joomla! component version 1.4. The vulnerability is an SQL injection in the showclass action to index.php, where the classid parameter can be manipulated to execute arbitrary SQL commands. This is a remote-access risk with potential confidentiality...

CVE-2009-2014

SQL injection vulnerability in the ComSchool comschool component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php...