CVE-2008-0846

CVE-2008-0846 describes a SQL injection vulnerability in the com_profile component for both Joomla! and Mambo, specifically within the index.php file. This flaw allows remote attackers to execute arbitrary SQL commands by manipulating the 'oid' parameter. With a CVSS score of 7.5, it is considered highly severe, enabling unauthorized access to data (C:P), modification of data (I:P), and denial of service (A:P) with low attack complexity and no authentication required. While not listed in CISA KEV, public exploit code exists on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.