CVE-2008-6234: SQL Injection

Published Feb 21, 2009
·
Updated

SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

Affected Software

8 affected components
Joomla Com Musica
Mambo-foundation Com Musica
Joomla joomla
Mambo-foundation Mambo
All of the following
Any of the following
Joomla Com Musica
Mambo-foundation Com Musica
Any of the following
Joomla joomla
Mambo-foundation Mambo

Event History

Feb 21, 2009
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
01:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·01:30 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2008-6234?

CVE-2008-6234 is classified as a high-severity SQL injection vulnerability.

2

How do I fix CVE-2008-6234?

To fix CVE-2008-6234, upgrade to the latest version of the com_musica module for Joomla! or Mambo that addresses this SQL injection issue.

3

Which applications are affected by CVE-2008-6234?

CVE-2008-6234 affects the com_musica module in Joomla! and Mambo applications.

4

What type of attack is possible with CVE-2008-6234?

CVE-2008-6234 allows remote attackers to execute arbitrary SQL commands via the id parameter.

5

Is CVE-2008-6234 present in all versions of Joomla! and Mambo?

CVE-2008-6234 is specific to the com_musica module and is not present in all versions of Joomla! and Mambo.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203