CVE-2008-0689: SQL Injection

Published Feb 12, 2008

Updated

SQL injection vulnerability in index.php in the Marketplace (commarketplace) 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a showcategory action.

Affected Software

2 affected components

Joomla Com Marketplace=1.1.1-pl1

Joomla Com Marketplace=1.1.1

Event History

Feb 12, 2008

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0689?

CVE-2008-0689 has been classified as having a medium severity due to the risk of unauthorized SQL command execution.

How do I fix CVE-2008-0689?

To fix CVE-2008-0689, upgrade to the latest version of the Marketplace component for Joomla! that has addressed this vulnerability.

What impact does CVE-2008-0689 have on Joomla! sites?

CVE-2008-0689 allows remote attackers to manipulate the database by executing arbitrary SQL commands through a vulnerable parameter.

Which versions of the Marketplace component are affected by CVE-2008-0689?

CVE-2008-0689 affects versions 1.1.1 and 1.1.1-pl1 of the Marketplace component for Joomla!.

Can CVE-2008-0689 be exploited without authentication?

Yes, CVE-2008-0689 can be exploited by remote attackers without requiring authentication.