CVE-2008-0607: SQL Injection
SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 (SOBI2, comsobi2) 2.5.3 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0607?
CVE-2008-0607 has been classified as a medium severity SQL injection vulnerability.
How do I fix CVE-2008-0607?
To fix CVE-2008-0607, upgrade the Sigsiu Online Business Index to the latest version or apply any available patches.
What systems are affected by CVE-2008-0607?
CVE-2008-0607 affects Joomla! and Mambo installations using the com_sobi2 component version 2.5.3.
Can CVE-2008-0607 allow unauthorized access to my database?
Yes, CVE-2008-0607 allows remote attackers to execute arbitrary SQL commands, potentially compromising database security.
Is CVE-2008-0607 still a threat today?
While CVE-2008-0607 may not be actively exploited now, systems still using unpatched versions are vulnerable to attacks.