CVE-2009-4474

The CVE-2009-4474 entry details a SQL injection in the Mike de Boer zoom (com_zoom) component version 2.0 for Mambo, exploitable via the catid parameter to index.php. The vulnerability enables remote attackers to run arbitrary SQL commands, with impact described as partial confidentiality, integr...