Security Advisory
CVE-2008-2676
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in the iJoomla News Portal (com_news_portal) component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.