Joomla Odudeprofile component 'profession' Parameter SQL Injection Vulnerability

An attacker can exploit the issue using a browser.

The following example data is available:

http://www.example.com/index.php?option=com_odudeprofile&view=search&profession=(SQL)


 

Privacy Statement
Copyright 2010, SecurityFocus