CVE-2008-0652

The CVE-2008-0652 entry describes an SQL injection in index.php of the Mambo/Joomla! Downloads (com_downloads) component. The vulnerability allows remote attackers to inject arbitrary SQL via the filecatid parameter in a selectfolder action. This exposes the possibility of unauthorized data expos...