CVE-2008-6653

2009-04-0710:00:00

mitre

www.cve.org

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.1%

JSON

SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.

References

forum.wh-com.de/index.php?topic=497.0

osvdb.org/50423

www.securityfocus.com/bid/29000

exchange.xforce.ibmcloud.com/vulnerabilities/42124

www.exploit-db.com/exploits/5527