CVE-2009-2014

CVE-2009-2014 affects the ComSchool (com_school) Joomla! component version 1.4. The vulnerability is an SQL injection in the showclass action to index.php, where the classid parameter can be manipulated to execute arbitrary SQL commands. This is a remote-access risk with potential confidentiality...