CVE-2008-0686: SQL Injection
Published Feb 12, 2008
·Updated
SQL injection vulnerability in index.php in the NeoReferences (comneoreferences) 1.3.1 and 1.3.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Affected Software
4 affected components
Joomla Com Neoreferences=1.3.1
Mambo Com Neoreferences=1.3.3
Mambo Com Neoreferences=1.3.1
Joomla Com Neoreferences=1.3.3
Event History
Feb 12, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0686?
CVE-2008-0686 is considered a critical SQL injection vulnerability that could allow attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2008-0686?
To fix CVE-2008-0686, it is recommended to update the NeoReferences component to a version that is not vulnerable, such as versions later than 1.3.3.
3
Which Joomla! versions are affected by CVE-2008-0686?
CVE-2008-0686 affects Joomla! versions 1.3.1 and 1.3.3 of the NeoReferences component.
4
Can CVE-2008-0686 be exploited remotely?
Yes, CVE-2008-0686 can be exploited by remote attackers due to the SQL injection vulnerability.
5
What parameters are exploited in CVE-2008-0686?
The catid parameter is exploited in CVE-2008-0686 to execute arbitrary SQL commands.