Com Ezstore Security Vulnerabilities - May

CVE-2008-3586

SQL injection vulnerability in the EZ Store (com_ezstore) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.