SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/40167https://www.exploit-db.com/exploits/5034http://secunia.com/advisories/28736http://www.securityfocus.com/bid/27564