Mambo/Joomla CMS ID SQL Injection Vulnerability

Bugtraq ID:	19734
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 28 2006 12:00AM
Updated:	Feb 05 2007 07:48PM
Credit:	[email protected] is credited with the discovery of these vulnerabilities.
Vulnerable:	Mambo Mambo Open Source 4.5.4 Mambo Mambo Open Source 4.6.0 rc2 Joomla Joomla 1.0.10
Not Vulnerable:	Mambo Mambo Open Source 4.5.5 Joomla Joomla 1.0.12

Mambo/Joomla CMS ID SQL Injection Vulnerability

Mambo/Joomla CMS are prone to a common SQL-injection because the applications fail to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the applications, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Mambo 4.5.4/4.6 RC2 and Joomla 1.0.10 are vulnerable; other versions may be affected.

Mambo/Joomla CMS ID SQL Injection Vulnerability

Attackers can exploit these issues via a web client.

Mambo/Joomla CMS ID SQL Injection Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.


Mambo Mambo Open Source 4.5.4

• Mambo MamboV4.5.5.zip
  http://mamboxchange.com/frs/download.php/8458/MamboV4.5.5.zip

Mambo/Joomla CMS ID SQL Injection Vulnerability

References:

• [Full-disclosure] The vulnerabilities festival ! (Omid)
  
• Joomla Project Homepage (Joomla)
  
• Release Name: Mambo V4.5.5 (Mambo)
  
• Sql injection Mambo/Joomla CMS : Web Page ("Omid" )