Security Advisory

CVE-2008-0849

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-02-21 00:00:00
Last updated 2024-08-07 08:01:40
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652.