Description
The mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to integer when the variable's default value is numeric, which has unspecified impact and attack vectors, which may permit SQL injection attacks.
Remediation
References
Related Vulnerabilities
Python Improper Input Validation Vulnerability (CVE-2013-7338)
Internet Information Services Other Vulnerability (CVE-2003-0225)
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17304)
MySQL CVE-2013-1511 Vulnerability (CVE-2013-1511)
WordPress Plugin Easy Forms for MailChimp Unspecified Vulnerability (6.3.2)