CVE-2008-1427: SQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component for Joomla!

Security readout for executives and security teams

This CVE affects the Acajoom Joomla component and could let a remote attacker manipulate database queries through a web request. For a business, the concern is exposure of an old, internet-facing Joomla extension that may allow unauthorized database access. The bundle does not provide a CVSS score or vendor fix details. Most likely exposure is legacy Joomla sites still running Acajoom com_acajoom 1.1.5 or 1.2.5 with the affected mailing view reachable from the internet. The source bundle lists affected product metadata as incomplete, but the CVE description names the component and versions. Prioritize remediation for any internet-facing Joomla site using the named Acajoom versions. The issue is old, but public exploit information and possible database impact make lingering legacy deployments a meaningful business risk. Mitigation focus: Inventory Joomla sites for Acajoom com_acajoom 1.1.5 or 1.2.5.; Check Joobi or Joomla extension guidance for fixed or supported versions.; Remove or disable the component if no supported fix is available..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.