CVE-2009-4650

The CVE covers a SQL injection vulnerability in the Joomla! extension Webee Comments (com_webeecomment) , affecting versions 1.1.1, 1.2, and 2.0 . The flaw allows remote attackers to inject arbitrary SQL via the articleId parameter in the default action to index2.php , enabling execution of arbit...

CVE-2009-4651

CVE-2009-4651 affects Joomla! through the Webee Comments (com_webeecomment) component versions 1.1.1, 1.2, and 2.0. The root cause is cross-site scripting (XSS) in the way BBCode tags (color, img, url) are processed, allowing remote attackers to inject arbitrary script or HTML via unspecified vec...