TI-2009-02285 CVE-2009-2395 · GHSA-76hp-m43v-6q55SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for…Priority LOW 38SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03029 · Published 2009-07-09 · No fix listed CWE-89