chillcreations mod_ccnewsletter 1.0.7-1.0.9 - SQL Injection via id Parameter
SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.