Security Advisory

CVE-2009-2395

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-07-09 16:00:00
Last updated 2024-08-07 05:52:14
Assigner mitre
State PUBLISHED

Description

SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php.