CVE-2008-2676
Joomla Com News Portal < 1.0 - SQL Injection
Title source: ruleDescription
SQL injection vulnerability in the iJoomla News Portal (com_news_portal) component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by ilker Kandemir · perlwebappsphp
https://www.exploit-db.com/exploits/5761
Scores
EPSS
0.0002
EPSS Percentile
4.9%
Details
CWE
CWE-89
Status
published
Products (2)
joomla/com_news_portal
< 1.0
joomla/joomla
Published
Jun 12, 2008
Tracked Since
Feb 18, 2026