ajann has reported a vulnerability in D4J eZine, which can be exploited by malicious people to conduct SQL injection attacks.

Input passed to the "article" parameter to the com_ezine component is not properly sanitised before being used in SQL queries. This can be exploited by malicious people to manipulate SQL queries by injecting arbitrary SQL code.

The vulnerability is reported in version 2.8. Other versions may also be affected.

Solution
Filter malicious input (e.g. using mod_security).

Provided and/or discovered by
ajann

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/3590

Deep Links
Links available to Secunia VIM customers