Description
SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing.
References
- 32520 vdb-entry
- 20070118 The vulnerabilities festival ! mailing-list
- 19734 vdb-entry
- 20070204 Sql injection bugs in Joomla and Mambo mailing-list
- http://www.hackers.ir/advisories/festival.txt