Joomla Component com_jsupport SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component comjsupport SQL Injection Vulnerability Date: 12.11.2010 Author: Valentin Category: webapps/0day Version: 1.5.6 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General...

CVE-2010-4838: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote authenticated users, with Public Back-end permissions, to execute arbitrary SQL commands via the alpha parameter in a 1 listTickets or 2 listFaqs action to administrator/index.php...