SQL Injection in Joomla Com News Portal

CVE-2008-2676

SQL injection vulnerability in the iJoomla News Portal (com_news_portal) component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.

Vulnerability class: SQL Injection

EPSS: 0.009 (56.9th percentile) — read the EPSS interpretation.