Vulnerability Database

296,760

Total vulnerabilities in the database

CVE-2008-2564

SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php.

Published: Jun 6, 2008
Updated: Apr 13, 2023
CVE: CVE-2008-2564
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
Joomla / com_jotloader	-	1.2.1.a.x
Joomla / com_jotloader	1.0.1	1.0.1.x
Joomla / joomla	-	-

http://secunia.com/advisories/30541
http://www.securityfocus.com/bid/29554
https://exchange.xforce.ibmcloud.com/vulnerabilities/42840
https://www.exploit-db.com/exploits/5737

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo