Mambo/Joomla CMS Multiple SQL Injection Vulnerabilities
BID:19719
Info
Mambo/Joomla CMS Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 19719 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 26 2006 12:00AM |
| Updated: | Aug 31 2006 08:03PM |
| Credit: | [email protected] is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Mambo Mambo Open Source 4.6.0 rc2 Joomla Joomla 1.0.10 |
| Not Vulnerable: | |
Discussion
Mambo/Joomla CMS Multiple SQL Injection Vulnerabilities
Mambo/Joomla CMS are prone to multiple SQL-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the applications, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Mambo 4.6 RC2 and Joomla 1.0.10 are reported vulnerable; other versions may be affected.
Mambo/Joomla CMS are prone to multiple SQL-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the applications, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Mambo 4.6 RC2 and Joomla 1.0.10 are reported vulnerable; other versions may be affected.
Exploit / POC
Mambo/Joomla CMS Multiple SQL Injection Vulnerabilities
Attackers can exploit these issues via a web client.
Attackers can exploit these issues via a web client.
Solution / Fix
Mambo/Joomla CMS Multiple SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
Mambo/Joomla CMS Multiple SQL Injection Vulnerabilities
References:
References: