CVE-2008-0653: SQL Injection
Published Feb 7, 2008
·Updated
SQL injection vulnerability in index.php in the Ynews (comynews) 1.0.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showYNews action.
Affected Software
1 affected component
Joomla Com Ynews=1.0.0
Event History
Feb 7, 2008
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0653?
CVE-2008-0653 has a high severity rating due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2008-0653?
To fix CVE-2008-0653, update the Ynews component to the latest version that addresses the SQL injection vulnerability.
3
Which Joomla! version is affected by CVE-2008-0653?
CVE-2008-0653 specifically affects version 1.0.0 of the Ynews component for Joomla!
4
What type of attack is possible with CVE-2008-0653?
CVE-2008-0653 allows attackers to execute arbitrary SQL commands through the id parameter.
5
Who is impacted by CVE-2008-0653?
Remote attackers targeting Joomla! sites using the vulnerable Ynews component 1.0.0 are primarily impacted by CVE-2008-0653.