First published: Mon Feb 04 2008(Updated: )
SQL injection vulnerability in index.php in the CatalogShop (com_catalogshop) 1.0b1 componenent for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mamboserver Catalogshop | =1.0b1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-0557 is classified as a critical-severity SQL injection vulnerability.
To fix CVE-2008-0557, you should update the CatalogShop component to a version that does not contain this vulnerability.
CVE-2008-0557 affects the CatalogShop 1.0b1 component for Mambo and Joomla! installations.
Yes, CVE-2008-0557 allows remote attackers to execute arbitrary SQL commands, potentially leading to data manipulation.
Yes, there are known exploits that take advantage of the SQL injection vulnerability in CVE-2008-0557.