Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2008-0815: Joomla! com_mezun component lets attackers run database commands
CVE-2008-0815 · published 18 years ago
Summary
The com_mezun extension for Joomla! can be tricked into executing unwanted database commands when a special value is sent in the id field of an edit request. This lets a remote attacker view, change, or delete information stored by the site. Apply the vendor’s security update or remove/disable the component until it is patched.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| egitimhost | com_mezun |
All versions
cpe:2.3:a:egitimhost:com_mezun:*:*:*:*:*:*:*:* |
| joomla | com_mezun |
All versions
cpe:2.3:a:joomla:com_mezun:*:*:*:*:*:*:*:* |
Original advisory text
SQL injection vulnerability in the com_mezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task.
SQL injection vulnerability in the com_mezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
7.5
High
Type
CWE-89SQL Injection
Timeline
Published19 Feb 2008
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2008-0815 · NVD
Track software like this
Free during beta