CVE-2008-0689

SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_category action.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.94% chance of exploitation in the next 30 days, 58th percentile

Published

2008-02-12

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/7097
• https://www.exploit-db.com/exploits/5055

References

• CVE Record
• NVD entry

Related

• CVE-2008-0688
• CVE-2008-0690
• CVE-2008-0686
• CVE-2008-0691
• CVE-2008-0685
• CVE-2008-0692