CVE-2008-6337: SQL Injection
SQL injection vulnerability in the Volunteer Management System (comvolunteer) module 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jobid parameter in a jobshow action to index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6337?
CVE-2008-6337 has a moderate severity rating due to the potential for remote code execution via SQL injection.
How do I fix CVE-2008-6337?
To fix CVE-2008-6337, upgrade the Volunteer Management System (com_volunteer) module to version 2.1 or later.
What software is affected by CVE-2008-6337?
CVE-2008-6337 affects the Volunteer Management System (com_volunteer) module version 2.0 for Joomla!.
What types of attacks can be executed due to CVE-2008-6337?
CVE-2008-6337 allows remote attackers to execute arbitrary SQL commands through the job_id parameter.
Is CVE-2008-6337 patched in newer versions of the module?
Yes, newer versions of the Volunteer Management System module have patched the vulnerability present in CVE-2008-6337.