CVE-2009-4628

Publication date

2010-01-18 20:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in the TemplatePlaza.com TPDugg (com_tpdugg) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a tags action to index.php.