RSJoomla! RSMediaGallery Component SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the RSMediaGallery component for Joomla, specifically in versions 1.7.4 to 2.1.6. This vulnerability arises from the dashboard component's use of unescaped user-supplied data in SQL queries. As a result, an authenticated attacker could inject malicious SQL code through unsanitized input fields, directly impacting the database by allowing unauthorized access, data leakage, or modification of records.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the database, allowing attackers to leak or modify data.