CVE-2008-0832

SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the surano parameter in a viewayat action.

Published: Feb 20, 2008
Updated: Apr 13, 2023
CVE: CVE-2008-0832
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
mambo / kemas_antonius_com_quran	-	1.1.x
Joomla / kemas_antonius_com_quran	-	1.1.x

http://archives.neohapsis.com/archives/bugtraq/2008-02/0399.html
http://osvdb.org/52226
http://secunia.com/advisories/28986
http://www.securityfocus.com/bid/27842
https://exchange.xforce.ibmcloud.com/vulnerabilities/40573
https://www.exploit-db.com/exploits/5128

Vulnerability Database

CVE-2008-0832

Deep Security Visibility Without the Complexity