CVE-2009-3661: Blueconstantmedia Com Djcatalog

Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a showItem action and (2) cid parameter in a show action to index.php.

Affected products

• Blueconstantmedia Com Djcatalog: any version

Published 2009-10-11. Last modified 2026-06-16.