2017-12-27 18:08:20 2018-01-11 17:04:10

The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.