CVE-2012-1116
SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Date published : 2012-09-25
http://www.securityfocus.com/bid/52312
http://developer.joomla.org/security/news/391-20120301-core-sql-injection.html