Security Advisory

CVE-2008-0652

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-02-07 20:00:00
Last updated 2024-08-07 07:54:22
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action.