EUVD-2009-3324

Malware in sbrugna...

CVE-2009-3342: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in frontend/assets/ajax/checkusername.php in the AlphaUserPoints comalphauserpoints component 1.5.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the username2points parameter...