CVE-2008-0517
31.01.2008, 20:00
SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action.
SQL Injection
| Vendor | Product | Version |
|---|---|---|
| darko_selesi | estateagent | 0.1 |
| joomla | joomla | * |
| mambo | mambo | 4.5 |
| mambo | mambo | 4.5.0.2 |
| mambo | mambo | 4.5.1.3 |
| mambo | mambo | 4.5.1_1.0.9 |
| mambo | mambo | 4.5.1_beta |
| mambo | mambo | 4.5.1_beta2 |
| mambo | mambo | 4.5.1a |
| mambo | mambo | 4.5.2 |
| mambo | mambo | 4.5.2.1 |
| mambo | mambo | 4.5.2.2 |
| mambo | mambo | 4.5.2.3 |
| mambo | mambo | 4.5.3h |
| mambo | mambo | 4.5.4 |
| mambo | mambo | 4.5_1.0.0 |
| mambo | mambo | 4.5_1.0.1 |
| mambo | mambo | 4.5_1.0.2 |
| mambo | mambo | 4.5_1.0.3_beta |
| mambo | mambo | 4.5_1.0.9 |
𝑥
= Vulnerable software versions