high7.5Public exploit code
CVE-2008-2632
SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component acctexp 0.12.x - Blind SQL Injection2008-06-02 · webapps · php · Verified
Impact
SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the usage parameter in a subscribe action to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Com Acctexp | Version 0.12 |
| Joomla | Joomla | All versions |