SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 (com_weblinks) allows remote attackers to execute arbitrary SQL commands via the catid parameter.
http://www.securityfocus.com/archive/1/459203/100/0/threaded
http://www.hackers.ir/advisories/festival.txt
http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html