Description
SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query string, possibly PHP_SELF.
References
- ADV-2006-4090 vdb-entry
- 20614 vdb-entry
- 20061018 Secunia Research: Joomla BSQ Sitestats Script Insertion and SQLInjection mailing-list
- bsq-sitestats-uri-sql-injection(29662) vdb-entry
- http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats
- http://secunia.com/secunia_research/2006-65/advisory/