CVE-2011-1151: Improper Neutralization of Special Elements used in an SQL Command

Joomla! 1.6.0 is vulnerable to SQL Injection via the filterorder and filerorderDir parameters...