CVE-2008-0607

SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) 2.5.3 component for Joomla! and Mambo…

High7.5Public exploitEPSS 1.3%

Published: 6 Feb 2008
Updated: 7 Aug 2024
Reserved: 5 Feb 2008
Assigned by: mitre

Description

SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) 2.5.3 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Public exploit

An exploit or proof of concept is public: anyone can try it against an unpatched system. A reference of the record is tagged as an exploit.

References tagged exploit1 reference

5038 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred

Timeline

2008
5 Feb 2008
5 Feb 2008
ID reserved
By mitre
6 Feb 20081 day later
6 Feb 2008· 1 day later
Published
2024
7 Aug 202417 years later
7 Aug 2024· 17 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2008-0607, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	2.0	High7.5	AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS (exploitation in 30 days): 1.3% · top 30% of all CVEs (9 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Affected products

n/a
- affected n/a

References (2)

5038 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred
27617 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2008-0607](https://cveledger.app/badge/CVE-2008-0607.svg)](https://cveledger.app/cve/CVE-2008-0607)

Record last updated 7 Aug 2024, 07:54 UTC.