CVE-2008-0510

SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter.

Affected products

Joomla!, Mambo, Newsletters

Joomla Com Newsletter

All versions

Mambo Com Newsletter

All versions

Mambo

= 4.5

CVSS 2.0

7.5 HIGH

EPSS

1.0% (58th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2008-01-31