CVE-2008-2564

CVE-2008-2564 affects Joomla! via the JotLoader (com_jotloader) component, vulnerable in version 1.2.1.a and earlier. The root cause is an SQL injection allowing remote attackers to execute arbitrary SQL commands through the cid parameter to index.php. This is the only publicly documented detail ...