EUVD-2008-0527

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent comestateagent 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action...

CVE-2008-0517

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent comestateagent 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action...

CVE-2008-0517

CVE-2008-0517 describes an SQL injection in index.php of the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla!. The vulnerability allows remote attackers to inject arbitrary SQL via the objid parameter in a contact showObject action. Affected software is the Est...