CVE-2008-6653

Description

SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.

References

https://www.exploit-db.com/exploits/5527

https://exchange.xforce.ibmcloud.com/vulnerabilities/42124

https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6615

http://www.securityfocus.com/bid/29000

http://osvdb.org/50423

http://forum.wh-com.de/index.php?topic=497.0

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS