CVE-2008-6653: SQL Injection
Published Apr 7, 2009
·Updated
SQL injection vulnerability in webhosting.php in the Webhosting Component (comwebhosting) module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
Affected Software
17 affected components
Joomla joomla
Mambo Mambo
Wh-com Com Webhosting<=1.1
Wh-com Com Webhosting=0.5-beta
Wh-com Com Webhosting=0.5.3-beta
Wh-com Com Webhosting=0.5.4-beta
Wh-com Com Webhosting=0.5.5-beta
Wh-com Com Webhosting=0.5.6-beta
Wh-com Com Webhosting=1.0-stable
Wh-com Com Webhosting=1.0.1-stable
Wh-com Com Webhosting=1.1-alpha
Wh-com Com Webhosting=1.1-beta
Wh-com Com Webhosting=1.1-rc1
Wh-com Com Webhosting=1.1-rc2
Wh-com Com Webhosting=1.1-rc3
Wh-com Com Webhosting=1.1-rc4
Wh-com Com Webhosting=1.1-rc5
Event History
Apr 7, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
02:17 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6653?
CVE-2008-6653 has been classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2008-6653?
To fix CVE-2008-6653, upgrade the Webhosting Component (com_webhosting) to version 1.1 RC7 or later.
3
Which applications are affected by CVE-2008-6653?
CVE-2008-6653 affects Joomla! and Mambo versions using the Webhosting Component prior to 1.1 RC7.
4
What type of vulnerability is CVE-2008-6653?
CVE-2008-6653 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
5
Can CVE-2008-6653 be exploited remotely?
Yes, CVE-2008-6653 can be exploited remotely by attackers sending specially crafted requests.