Lucene search

K
cve[email protected]CVE-2008-0517
HistoryJan 31, 2008 - 8:00 p.m.

CVE-2008-0517

2008-01-3120:00:00
CWE-89
web.nvd.nist.gov
18
cve-2008-0517
sql injection
darko selesi estateagent
mambo
joomla
nvd

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

43.5%

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action.

Affected configurations

NVD
Node
darko_selesiestateagentMatch0.1
OR
joomlajoomla
OR
mambomamboMatch4.5
OR
mambomamboMatch4.5.0.2
OR
mambomamboMatch4.5.1.3
OR
mambomamboMatch4.5.1_1.0.9
OR
mambomamboMatch4.5.1_beta
OR
mambomamboMatch4.5.1_beta2
OR
mambomamboMatch4.5.1a
OR
mambomamboMatch4.5.2
OR
mambomamboMatch4.5.2.1
OR
mambomamboMatch4.5.2.2
OR
mambomamboMatch4.5.2.3
OR
mambomamboMatch4.5.3h
OR
mambomamboMatch4.5.4
OR
mambomamboMatch4.5_1.0.0
OR
mambomamboMatch4.5_1.0.1
OR
mambomamboMatch4.5_1.0.2
OR
mambomamboMatch4.5_1.0.3_beta
OR
mambomamboMatch4.5_1.0.9

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

43.5%

Related for CVE-2008-0517