CVE-2009-3325

CVE-2009-3325 describes an SQL injection in the Joomla! component com_surveymanager (Survey Manager) from Focusplus Developments, version 1.5.0. The vulnerability is triggered via the stype parameter in the editsurvey action to index.php, allowing remote attackers to execute arbitrary SQL command...