Security Advisory
CVE-2008-2093
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in the Profiler (com_comprofiler) component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php.