CVE-2009-3334

The CVE-2009-3334 entry documents an SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_jinc) version 0.2 for Joomla!. The flaw allows remote attackers to execute arbitrary SQL commands through the newsid parameter in the messages ...