CVE-2008-0510: Joomla! Com Newsletter

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter.

Affected products

  • Joomla! Com Newsletter: any version
  • Mambo Com Newsletter: any version
  • Mambo Mambo: version 4.5 only

Published 2008-01-31. Last modified 2026-06-16.