CVE-2008-2093

SQL injection vulnerability in the Profiler (com_comprofiler) component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php.

Affected products

Community Builder, Mambo

Joomla Com Comprofiler

All versions

Joomlapolis Community Builder

All versions

Mambo Com Comprofiler

All versions

CVSS 2.0

7.5 HIGH

EPSS

1.0% (58th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2008-05-06