CVE-2008-0849: SQL Injection

Published Feb 21, 2008

Updated

SQL injection vulnerability in index.php in the Downloads (comdownloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652.

Affected Software

2 affected components

Mambo Com Downloads

Joomla Com Downloads

Event History

Feb 21, 2008

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0849?

CVE-2008-0849 is categorized as a high severity SQL injection vulnerability.

How do I fix CVE-2008-0849?

To fix CVE-2008-0849, update the Mambo or Joomla! com_downloads component to a patched version provided by the vendor.

What are the potential impacts of CVE-2008-0849?

CVE-2008-0849 can allow remote attackers to execute arbitrary SQL commands, potentially compromising the database.

Which versions of Mambo and Joomla! are affected by CVE-2008-0849?

CVE-2008-0849 affects all versions of Mambo and Joomla! that use the vulnerable com_downloads component.

Can CVE-2008-0849 be exploited remotely?

Yes, CVE-2008-0849 can be exploited remotely by attackers through manipulated HTTP requests.