PT-2008-2390 · Mambo Foundation+1 · Mambo+1

S@Bun · Publicado 2008-02-13 · Atualizado 2017-09-29 · CVE-2008-0772

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! (affected versions not specified) Mambo (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the sid parameter in a 'view' task in the com doc component of the affected software.

Recommendations For Joomla!, consider restricting access to the com doc component until a fix is available. For Mambo, avoid using the sid parameter in the affected component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-0772

Produtos afetados

Joomla!

Mambo

Referências · 3

• 🔥 https://exploit-db.com/exploits/5080 · Exploit
• 🔥 http://securityfocus.com/bid/27679 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0772 · Nota de Segurança