CVE-2008-2692

SQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the ArticleID parameter in a comment action to index.php.

Link	Resource
http://www.securityfocus.com/bid/29596
http://secunia.com/advisories/30567	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42920
https://www.exploit-db.com/exploits/5755

Configuration 1

cpe:2.3:a:joomla:com_yvcomment:1.11:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.8:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.6:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.9:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.4:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.1:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.13:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.12:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.16:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.15:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.10:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.7:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.2:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.5:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.14:*:*:*:*:*:*:* cpe:2.3:a:joomla:com_yvcomment:1.3:*:*:*:*:*:*:*

---

Published : 2008-06-13 07:41

Updated : 2017-09-29 01:31

---

NVD link : CVE-2008-2692

Mitre link : CVE-2008-2692

No products.

CWE-89