CVE-2008-2454: Joomla! Com Xsstream-Dm

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the xsstream-dm (com_xsstream-dm) component 0.01 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the movie parameter to index.php.

Affected products

• Joomla! Com Xsstream-Dm: version 0.01_beta only

Published 2008-05-27. Last modified 2026-06-16.