Security Advisory

CVE-2014-0794

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-01-26 20:00:00
Last updated 2024-08-06 09:27:19
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in the JV Comment (com_jvcomment) component before 3.0.3 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a comment.like action to index.php.