CWE Code: 79
Vulnerability Type: sql_injection
CVSS Score: 4.3
CWE Name:  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary: sql injection vulnerability in the jv comment (com_jvcomment) component before 3.0.3 for joomla! allows remote authenticated users to execute arbitrary sql commands via the id parameter in a comment.like action to index.php.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2014-01-26
Last Modified Date: 2018-10-09