CVE-2016-1000123

CVE-2016-1000123 describes an unauthenticated SQL Injection in Huge-IT Video Gallery for Joomla (v1.0.9). The vulnerability arises in the Joomla component (and related com_videogallerylite Ajax URL handling) where user-controlled POST data (notably page and galleryid) is used to construct SQL que...