CVE

Id
38934  
CVE No.
CVE-2009-1499  
Status
Candidate  
Description
SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php. NOTE: SecurityFocus states that this issue has been disputed by the vendor.  
Phase
Assigned (20090501)  
Votes
None (candidate not yet proposed)  
Comments