CVE-2010-4968: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the webmaster-tips.net Flash Gallery comwmtpic component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...