CVE-2010-4638

CVE-2010-4638 affects the Joomla! component com_jquarks4s (version 1.0.0). The vulnerability is in the submitSurvey function (controller.php); when magic_quotes_gpc is disabled, an attacker can inject SQL via the q parameter in a submitSurvey action to index.php. This leads to arbitrary SQL comma...