Unscored severity · published Apr 25, 2008
CVE-2008-1935
SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the idFiliale parameter
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the idFiliale parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JO
Joomla · Joomla
1.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1935
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1935
Exploit
http://www.securityfocus.com/bid/28900
www.vupen.com
http://www.vupen.com/english/advisories/2008/1346/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41980
www.exploit-db.com
https://www.exploit-db.com/exploits/5488
More from Joomla
9.8
CVE-2016-10033
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute…
5.3
CVE-2023-23752
[20230201] - Core - Improper access check in webservice endpoints
9.8
CVE-2026-73373
Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2
9.8
CVE-2026-35221
Joomla! Core - [20260506] - Authenticated blind SQLi in com_finder
9.8
CVE-2026-40383
Joomla! Core - [20260509] - LFI in HTMLView layout parameter