CVE-2008-2454

CVE-2008-2454 affects the xsstream-dm (com_xsstream-dm) component for Joomla! prior to a fixed version, with a SQL injection in the movie parameter to index.php that allows remote execution of arbitrary SQL commands. Root cause is improper input handling in the affected component. The connected d...