CVE-2008-0517: Darko Selesi Estateagent

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action.

Affected products

• Darko Selesi Estateagent: version 0.1 only
• Joomla! Joomla: any version
• Mambo Mambo: version 4.5 only; version 4.5.0.2 only; version 4.5.1.3 only; version 4.5.1_1.0.9 only; version 4.5.1_beta only; version 4.5.1_beta2 only; …

Published 2008-01-31. Last modified 2026-06-16.