NetSight
IP …
high7.5Public exploit code

CVE-2008-0832

SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla!

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the surano parameter in a viewayat action.

Affected products

VendorProductAffected versions
JoomlaKemas Antonius Com Quran
through 1.1
MamboKemas Antonius Com Quran
through 1.1

Weakness classification

CWE-89

References