CVE-2008-0517

CVE-2008-0517 describes an SQL injection in index.php of the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla!. The vulnerability allows remote attackers to inject arbitrary SQL via the objid parameter in a contact showObject action. Affected software is the Est...