CVE-2008-0829

SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail task.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2008-02-19

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Joomla (Joomla)
• Jooget (Joomlapixel)
• Mambo (Mambo)

References

• http://forum.joomlaitalia.com/index.php?topic=388.0
• http://members.joomlapixel.eu/download/componenti/patch-jooget-2.6.8-sql-injection/details.html
• http://secunia.com/advisories/28998
• http://www.securityfocus.com/bid/27836
• https://www.exploit-db.com/exploits/5132