Description
Trustwave SpiderLabs researcher Asaf Orpani has discovered an SQL injection vulnerability in versions 3.2 through 3.4.4 of Joomla!, a popular open-source Content Management System (CMS). Combining that vulnerability with other security weaknesses, our Trustwave SpiderLabs researchers are able to gain full administrative access to any vulnerable Joomla site.
Remediation
Upgrade to Joomla! version 3.4.5.
References
Related Vulnerabilities
WordPress Plugin Users Ultra SQL Injection (1.3.58)
WordPress Plugin Paid Downloads 'download_key' Parameter SQL Injection (2.01)
WordPress Plugin LeagueManager Multiple SQL Injection Vulnerabilities (3.9.1.1)
WordPress Plugin BadgeOS SQL Injection (3.7.1.2)
WordPress Plugin WP AutoComplete Search SQL Injection (1.0.4)