CVE-2008-1460: SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla!

Security readout for executives and security teams

CVE-2008-1460 is a SQL injection flaw in the Joovideo component for Mambo and Joomla. A remote attacker could manipulate the video detail request and run database commands. Business risk is highest for old public CMS sites still running Joovideo 1.0 or 1.2.2. Exposure is likely limited to legacy Mambo or Joomla installations that still have the Joovideo component installed and reachable from the internet. Modern sites without com_joovideo are not indicated as affected by the supplied sources. Prioritize remediation if any public legacy Joomla or Mambo site still uses Joovideo. The technology is old, but remote SQL injection can expose or alter database content. If no affected component exists, no further action is needed beyond recording the inventory result. Mitigation focus: Inventory Mambo and Joomla sites for the Joovideo component.; Disable or remove com_joovideo if it is not required.; If still required, check vendor or archived advisory guidance for a fixed replacement..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.