CVE-2008-0606

CVE-2008-0606 describes a SQL injection vulnerability in the Shambo2 (com_shambo2) component used by Mambo and Joomla!. The vulnerability is triggered in index.php via the Itemid parameter, allowing remote attackers to execute arbitrary SQL commands. Multiple sources (NVD, CVE lists, Prio) consis...