Home > Content Management, SQL Injection > Joomla GCalendar Component “gcid” SQLi

Joomla GCalendar Component “gcid” SQLi

December 1st, 2009

Application: Joomla
Affected Version: version 2.1.4 and other versions
Vendor’s URL: GCalendar Component
Bug Type: SQL Injection
Risk Level: Critical

Solution:
Edit the source code to ensure that input is properly sanitised.

Content Management, SQL Injection

Comments are closed.