CVE-2008-2633 – Joomla! Component JoomRadio 1.0 - 'id' SQL Injection

https://notcve.org/view.php?id=CVE-2008-2633

Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) show_radio or (2) show_video action to index.php. Múltiples vulnerabilidades de inyección SQL en el componente EXP JoomRadio (com_joomradio) 1.0 para Joomla! permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción (1) show_radio o (2) show_video de index.php. • https://www.exploit-db.com/exploits/5729 https://www.exploit-db.com/exploits/12400 http://packetstormsecurity.org/0806-exploits/joomlajoomradio-sql.txt http://secunia.com/advisories/30513 http://www.securityfocus.com/archive/1/501069/100/0/threaded http://www.securityfocus.com/bid/29504 https://exchange.xforce.ibmcloud.com/vulnerabilities/42814 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •