CVE-2009-4785

The CVE-2009-4785 entry concerns a SQL injection vulnerability in the Joomla! Quick News (com_quicknews) component. The flaw allows remote attackers to inject arbitrary SQL commands through the newsid parameter in the view_item action to index.php. Multiple connected sources (Red Hat advisory, NV...