Mambo

Com Downloads

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2008-0849

Exploit
  • EPSS 0.01%
  • Published 21.02.2008 00:44:00
  • Last modified 09.04.2025 00:30:58

SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652.

7.5

CVE-2008-0652

  • EPSS 0.01%
  • Published 07.02.2008 21:00:00
  • Last modified 09.04.2025 00:30:58

SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action.