high7.5Public exploit code
CVE-2008-4623
SQL injection vulnerability in the DS-Syndicate (com_ds-syndicate) component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component ds-syndicate - 'feed_id' SQL Injection2008-10-20 · webapps · php · Verified
Impact
SQL injection vulnerability in the DS-Syndicate (com_ds-syndicate) component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feed_id parameter to index2.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Martin Diphoorn | Com Ds-Syndicate | Version 1.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32321
- http://securityreason.com/securityalert/4453
- http://www.securityfocus.com/bid/31819
- http://www.vupen.com/english/advisories/2008/2859
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45979
- https://www.exploit-db.com/exploits/6792
- http://secunia.com/advisories/32321
- http://securityreason.com/securityalert/4453
- http://www.securityfocus.com/bid/31819
- http://www.vupen.com/english/advisories/2008/2859
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45979
- https://www.exploit-db.com/exploits/6792