CVE-2008-0918

SQL injection vulnerability in includes/countdlorlink.inc.php in the astatsPRO comastatspro 1.0.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to getfile.php, a different vector than CVE-2008-0839. NOTE: the provenance of this information is...

CVE-2008-0918

CVE-2008-0918 affects the astatsPRO (com_astatspro) 1.0.1 Joomla! component. The vulnerability is an SQL injection in includes/count_dl_or_link.inc.php (per CVE-2008-0918 description) that can be triggered via the id parameter to getfile.php, enabling arbitrary SQL commands. Connected records als...