CVE-2008-0801: SQL Injection
SQL injection vulnerability in index.php in the PAXXGallery (compaxxgallery) 0.2 component for Mambo and Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the iid parameter in a view action, and possibly (2) the userid parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0801?
CVE-2008-0801 has a medium severity rating due to its potential for remote SQL injection exploits.
How do I fix CVE-2008-0801?
To fix CVE-2008-0801, it is recommended to upgrade the PAXXGallery component to a patched version or implement input validation to sanitize the iid and userid parameters.
What systems are affected by CVE-2008-0801?
CVE-2008-0801 affects the PAXXGallery component version 0.2 used with Mambo and Joomla! installations.
Can CVE-2008-0801 be exploited remotely?
Yes, CVE-2008-0801 allows remote attackers to execute arbitrary SQL commands, making it a serious remote exploitation risk.
What are the consequences of exploiting CVE-2008-0801?
Exploiting CVE-2008-0801 can lead to unauthorized data access, data modification, and possibly full control over the affected database.