Vulnerabilities > Mambo > COM Shambo2 > High

DATE CVE VULNERABILITY TITLE RISK
2008-02-06 CVE-2008-0606 SQL Injection vulnerability in multiple products
SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter.
network
low complexity
joomla mambo phil-taylor CWE-89
7.5