← Database

CVE-2008-3498

HIGH CVSS: 7.5 Published: 2008-08-06 Modified: 2026-06-16

Description

SQL injection vulnerability in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in an orders action to index.php. NOTE: some of these details are obtained from third party information.

Affected Platforms

Netshinesoftware Com NetinvoiceJoomla Joomla\!

Weakness Type

CWE-89

References