COM Djcatalog

DATE	CVE	VULNERABILITY TITLE	RISK
2009-10-11	CVE-2009-3661	SQL Injection vulnerability in Blueconstantmedia COM Djcatalog Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a showItem action and (2) cid parameter in a show action to index.php. network blueconstantmedia joomla CWE-89	6.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.