A Joomla update released on Wednesday patches a critical SQL injection vulnerability that can be easily exploited by a remote attacker to obtain sensitive data and hijack websites.
Article Link: http://feedproxy.google.com/~r/Securityweek/~3/tm13m0e-4Ys/critical-sql-injection-flaw-patched-joomla