title: Extension - bestaddon.com - SQLi in BA Gallery component for Joomla <= 1.2.0
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.
problem types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
affected:
{
collectionURL: https://extensions.joomla.org/extension/ba-gallery/
defaultStatus: unaffected
packageName: com_bagallery
product: BA Gallery component for Joomla
vendor: bestaddon.com
versions:
status: affected, version: 1.0.0-1.2.0
}