CVE-2014-0794

Publication date

2014-01-26 20:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in the JV Comment (com_jvcomment) component before 3.0.3 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a comment.like action to index.php.