CVE-2009-3332

The CVE-2009-3332 issue is a documented SQL injection in the Joomla! extension JBudgetsmagic (com_jbudgetsmagic), versions 0.3.2 through 0.4.0. The vulnerability is triggered via the bid parameter in the mybudget action of index.php, allowing remote attackers to execute arbitrary SQL commands. Co...