CVE-2008-4715

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in the Jpad (com_jpad) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securityreason.com/securityalert/4485Exploit, Third Party Advisory
http://www.securityfocus.com/bid/28923Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41983Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/5493Third Party Advisory, VDB Entry
http://securityreason.com/securityalert/4485Exploit, Third Party Advisory
http://www.securityfocus.com/bid/28923Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41983Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/5493Third Party Advisory, VDB Entry

Timeline

Published: Oct 23, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008