Joomla Component com_jphoto SQL Injection (CVE-2009-4598)

An SQL injection vulnerability has been reported in Corephp Com Jphoto. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2009-4598

CVE-2009-4598 describes an SQL injection vulnerability in the JPhoto (com_jphoto) component for Joomla! version 1.0. The flaw allows remote attackers to execute arbitrary SQL commands through the id parameter in a category action to index.php. Documents indicate the vulnerability affects the JPho...