CVE-2016-15016

CVE-2016-15016 affects the Joomla plugin joomla_mod_einsatz_stats (versions up to 0.2). The vulnerability is in the helper.php function getStatsByType, where manipulating the year parameter leads to SQL injection. A fix is available in version 0.3, with the patch identified as 27c1b443cff45c81d9d...