CVE-2008-1297

The CVE-2008-1297 entry concerns a SQL injection in the index.php of the eWriting (com_ewriting) 1.2.1 module used with Mambo/Joomla! . The vulnerability is triggered via the cat parameter in the selectcat action, enabling remote attackers to execute arbitrary SQL commands . This is the exact iss...