SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request.Referenceshttps://www.exploit-db.com/exploits/43957