EUVD-2018-17754

Malware in sbrugna...

Sql injection

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099...

CVE-2011-5099

The CVE-2011-5099 entry affects Joomla! ccNewsletter (mod_ccnewsletter) in versions 1.0.7–1.0.9. The root cause is a SQL injection in helper/popup.php, enabling remote attackers to inject arbitrary SQL via the id parameter. The description does not specify exploited products beyond this Joomla! e...