CVE-2008-0754

CVE-2008-0754 describes multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla!. The flaws allow remote attackers to execute arbitrary SQL commands via (1) user_id in a showuser action or (2) category_id in a viewcategorysrecipes action. Connected ...

CVE-2008-2697

SQL injection vulnerability in Joomla! Rapid Recipe (com_rapidrecipe) component affects versions 1.6.6 and 1.6.7, exploitable via the recipe_id parameter in the viewrecipe action to index.php. The underlying issue is improper handling of user input, enabling remote attackers to manipulate SQL com...