CVE-2008-6653

SQL injection vulnerability in webhosting.php in the Webhosting Component comwebhosting module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...