Description
The mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to integer when the variable's default value is numeric, which has unspecified impact and attack vectors, which may permit SQL injection attacks.
References
- http://www.joomla.org/content/view/1510/74/
- 26916 vdb-entry
- 20874 third-party-advisory