CVE-2014-0794

CVE-2014-0794 describes a SQL injection in Joomla! JV Comment (com_jvcomment) prior to 3.0.3. The vulnerability occurs in the id parameter of the comment.like action to index.php, allowing remote authenticated users to inject arbitrary SQL commands into the application's database. Affected softwa...