TI-2008-02766 CVE-2008-2892 · GHSA-8c66-9w2h-5cm9SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla!…Priority LOW 35SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_payment action to index.php.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00973 · Published 2008-06-27 · No fix listed CWE-89