[VIM] Joomla! 'com_restaurante' Component 'id' Parameter SQL Injection Vulnerability

Rob keith rkeith at securityfocus.com
Fri May 27 12:50:12 CDT 2011


Thanks George, they look the same to me. We'll get that fixed up.

-Rob

On 11-05-27 11:40 AM, George A. Theall wrote:
> Bugtraq 48012 was created today for a SQL injection vulnerability. It 
> offers a link to a PoC but that's broken. And while the discussion 
> doesn't hold details about which script and parameter(s) are affected, 
> I suspect it's the same as 
> http://packetstormsecurity.org/files/view/101735/joomlarestaurants-sql.txt.
>
> If so, it looks like the vulnerability is already covered by BID 
> 28324, from back in 2008.
>
> Rob?
>
>
> George



More information about the VIM mailing list