CVE-2009-4217

CVE-2009-4217 describes a SQL injection in the Joomla! Itamar Elharar MusicGallery (com_musicgallery) component. The flaw allows remote attackers to execute arbitrary SQL commands through the id parameter in an itempage action to index.php. This is attributed to the component handling user-suppli...