Joomla Component com_marketplace SQL Injection (CVE-2008-0689)

An SQL injection vulnerability has been reported in Joomla Com Marketplace. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2008-0689

The provided data documents a SQL injection vulnerability in Joomla!’s Marketplace component (com_marketplace) for versions 1.1.1 and 1.1.1-pl1. The root cause is a SQL injection in index.php, exploitable via the catid parameter in a show_category action, enabling remote attackers to execute arbi...