CVE-2008-2892

The CVE-2008-2892 entry describes a SQL injection vulnerability in the Joomla! Feellove Exp Shop Component (com_expshop) version 1.0. The issue allows remote attackers to execute arbitrary SQL commands through the catid parameter in the show_payment action to index.php. The vulnerability arises i...