Unscored CVE-2008-0849 EUVD-2008-0856GHSA-9vh6-jvf9-f385

SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execut…

Published Feb 21, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652.

References

20080216 joomla SQL Injection (cat)(com_downloads) mailing-list
3676 third-party-advisory
downloads-indexphp-sql-injection(40621) vdb-entry
27860 vdb-entry