Joomla Component com_expshop SQL Injection (CVE-2008-2892)

An SQL injection vulnerability has been reported in Feellove Exp Shop ComponentFeellove Exp Shop Component. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2008-2892

The CVE-2008-2892 entry describes a SQL injection vulnerability in the Joomla! Feellove Exp Shop Component (com_expshop) version 1.0. The issue allows remote attackers to execute arbitrary SQL commands through the catid parameter in the show_payment action to index.php. The vulnerability arises i...