CVE-2008-6481

SQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php.

Affected products

Joomla!, Mambo

Joomprod Com Versioning

= 1.0.2

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

1.0% (58th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2009-03-17