JoomClip "cat" SQL Injection Vulnerability

SECUNIA ADVISORY ID:
SA37400

VERIFY ADVISORY:
http://secunia.com/advisories/37400/

DESCRIPTION:
A vulnerability has been reported in the JoomClip component for
Joomla, which can be exploited by malicious people to conduct SQL
injection attacks.

Input passed via the "cat" parameter in index.php (if "option" is set
to "com_joomclip" and "view" to "thumbs") is not properly sanitised
before being used in an SQL query. This can be exploited to
manipulate SQL queries by injecting arbitrary SQL code.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

Filter malicious characters and character sequences in a proxy.

PROVIDED AND/OR DISCOVERED BY:
599eme Man

ORIGINAL ADVISORY:
http://packetstormsecurity.org/0911-exploits/joomlajoomclip-sql.txt