CVE-2009-4199: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Mambo Resident aka Mos Res or commosres component 1.0f for Mambo and Joomla!, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 propertyuid parameter in a viewproperty action to index.php and the 2 reg...