PT-2008-2232 · Mambo Foundation+2 · Mambo+2

Published 2008-02-06 · Updated 2024-08-07 · CVE-2008-0607

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions com sobi2 version 2.5.3

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the catid parameter in the index.php file of the com sobi2 component for Joomla! and Mambo.

Recommendations For version 2.5.3, avoid using the catid parameter in the affected index.php file until the issue is resolved. Restrict access to the index.php file to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-0607

Affected Products

Joomla!

Mambo

Com Sobi2

References · 4

• 🔥 https://exploit-db.com/exploits/5038 · Exploit
• 🔥 http://securityfocus.com/bid/27617 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0607 · Security Note
• https://t.me/cvenotify/89576 · Telegram Post