CVE

Id
33009  
CVE No.
CVE-2008-2892  
Status
Candidate  
Description
SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_payment action to index.php.  
Phase
Assigned (20080627)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
358323 33009 CVE-2008-2892 MILW0RM:5893  View
358324 33009 CVE-2008-2892 URL:http://www.milw0rm.com/exploits/5893  View
358325 33009 CVE-2008-2892 BID:29869  View
358326 33009 CVE-2008-2892 URL:http://www.securityfocus.com/bid/29869  View
358327 33009 CVE-2008-2892 SECUNIA:30791  View
358328 33009 CVE-2008-2892 URL:http://secunia.com/advisories/30791  View
358329 33009 CVE-2008-2892 XF:expshop-index-sql-injection(43246)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47897 JVNDB-2008-003207 FireAnt の index.php におけるディレクトリトラバーサルの脆弱性 FireAnt の index.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2896 33009 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003207.html  View