CVE-2009-4650

Description

SQL injection vulnerability in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a default action to index2.php. NOTE: some of these details are obtained from third party information.

Weakness classification

• CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Primary references

• cve@mitre.org — Exploit
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Exploit