VULNERABILITY INTELLIGENCE

CVE-2008-0849

CVSS score7.5 HIGH

EPSS probability0.93%

CISA KEVNot currently listed

Published2008-02-21

Last modified2026-06-16

Description

SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652.