CVE-2008-6653

SQL injection vulnerability in webhosting.php in the Webhosting Component comwebhosting module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2008-6653

CVE-2008-6653 affects the Webhosting Component for Joomla! (com_webhosting) prior to 1.1 RC7, where webhosting.php exposes an SQL injection via the catid parameter to index.php. The root cause is improper sanitization of user input, enabling remote attackers to execute arbitrary SQL commands (wit...