BSQ Sitestats Joomla Component Multiple Input Validation Vulnerabilities
BID:20267
Info
BSQ Sitestats Joomla Component Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 20267 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-7124 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 29 2006 12:00AM |
| Updated: | Jul 06 2016 02:40PM |
| Credit: | Sven Krewitt of Secunia Research is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Joomla BSQ Sitestats 1.8 |
| Not Vulnerable: |
Joomla BSQ Sitestats 2.2.1 |
Discussion
BSQ Sitestats Joomla Component Multiple Input Validation Vulnerabilities
BSQ Sitestats is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation; other attacks are possible.
Version 1.8.0 is vulnerable; other versions may also be affected.
BSQ Sitestats is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation; other attacks are possible.
Version 1.8.0 is vulnerable; other versions may also be affected.
Exploit / POC
BSQ Sitestats Joomla Component Multiple Input Validation Vulnerabilities
An attacker can exploit these issues via a web client.
To exploit a cross-site scripting vulnerability, an attacker must entice an unsuspecting victim into following a malicious URI.
An attacker can exploit these issues via a web client.
To exploit a cross-site scripting vulnerability, an attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
BSQ Sitestats Joomla Component Multiple Input Validation Vulnerabilities
Solution:
The vendor has released version 2.2.1 to address these issues. Please see the references for more information.
Joomla BSQ Sitestats 1.8
Solution:
The vendor has released version 2.2.1 to address these issues. Please see the references for more information.
Joomla BSQ Sitestats 1.8
-
Joomla BSQ Sitestats Joomla Component 2.2.1
http://developer.joomla.org/sf/frs/do/downloadFile/projects.bsq_sitest ats/frs.bsq_sitestats_component.com_bsq_sitestats_2_2_1/frs6988?dl=1
References
BSQ Sitestats Joomla Component Multiple Input Validation Vulnerabilities
References:
References:
- BSQ Sitestats Homepage (Joomla)
- Joomla BSQ Sitestats Component Multiple Vulnerabilities (Secunia Research)
- Secunia Research: Joomla BSQ Sitestats Component Multiple (Secunia research)