CVE-2010-2845

SQL injection in Joomla! QuickFAQ (com_quickfaq) 1.0.3 allows remote attackers to inject arbitrary SQL via the Itemid parameter in a category action to index.php. Affected software is the QuickFAQ component for Joomla!; root cause appears to be improper handling of Itemid in the category action. ...