CVE-2008-0800

CVE-2008-0800 is a SQL injection vulnerability in index.php of the McQuiz (com_mcquiz) 0.9 Final component for Joomla! that allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action. Affected product: McQuiz 0.9 Final. Root cause: unsafely constructe...