Joomla 1.5.2: Potential SQL Injection Flaws Vulnerability
Users of Joomla 1.5.21 please be advised of a Potential SQL Injection Flaws vulnerability that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)
Amplify’d from http://www.criticalwatch.com
Joomla-SA-11/01/2010: Joomla 1.5.21 | Potential SQL Injection Flaws
VULNERABILITY DESCRIPTION Potential SQL Injection Flaws were detected Joomla! CMS version
1.5.20. These flaws were reported along with our Cross Scripting Flaw
which was fixed in 1.5.21. Developers believed that our reported SQL
Injection flaws are not fully exploitable because of Joomla! built-in
string filters and were not fixed in 1.5.21 which is currently the
latest version.
Read more at http://www.criticalwatch.com
See this Amp at http://amplify.com/u/ema6
Vulnerability Managment Blog 
Reply