CVE-2008-6653 SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the...
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wh-com com webhosting | <= 1.1 | No fix listed |
| wh-com com webhosting | = 0.5-beta | No fix listed |
| wh-com com webhosting | = 0.5.3-beta | No fix listed |
| wh-com com webhosting | = 0.5.4-beta | No fix listed |
| wh-com com webhosting | = 0.5.5-beta | No fix listed |
| wh-com com webhosting | = 0.5.6-beta | No fix listed |
| wh-com com webhosting | = 1.0-stable | No fix listed |
| wh-com com webhosting | = 1.0.1-stable | No fix listed |
| wh-com com webhosting | = 1.1-alpha | No fix listed |
| wh-com com webhosting | = 1.1-beta | No fix listed |
| wh-com com webhosting | = 1.1-rc1 | No fix listed |
| wh-com com webhosting | = 1.1-rc2 | No fix listed |
| wh-com com webhosting | = 1.1-rc3 | No fix listed |
| wh-com com webhosting | = 1.1-rc4 | No fix listed |
| wh-com com webhosting | = 1.1-rc5 | No fix listed |
References
- forum.wh-com.de vendor-advisory
- 50423 vdb-entry
- 29000 exploit vdb-entry
- webhosting-catid-sql-injection(42124) vdb-entry
- 5527 exploit