CVE-2009-4199

The CVE-2009-4199 entry describes multiple SQL injection vulnerabilities in the Mambo Resident component (com_mosres) version 1.0f used with Mambo/Joomla!. The root cause is input handling when magic_quotes_gpc is disabled, allowing remote attackers to inject SQL via two parameters: property_uid ...