SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-89,
Products Affected