Joomla! Fastball Component SQL Injection Vulnerability
BID:36520
Info
Joomla! Fastball Component SQL Injection Vulnerability
| Bugtraq ID: | 36520 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 25 2009 12:00AM |
| Updated: | Feb 11 2010 06:01PM |
| Credit: | kaMtiEz |
| Vulnerable: |
Fastball Productions Fastball 1.2 |
| Not Vulnerable: | |
Discussion
Joomla! Fastball Component SQL Injection Vulnerability
The Fastball component ('com_fastball') for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
The issue affects Fastball 1.2; other versions may also be affected.
The Fastball component ('com_fastball') for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
The issue affects Fastball 1.2; other versions may also be affected.
Exploit / POC
Joomla! Fastball Component SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Joomla! Fastball Component SQL Injection Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Joomla! Fastball Component SQL Injection Vulnerability
References:
References:
- Fastball Homepage (Fastball Productions)
- Joomla! Homepage (Joomla!)
- Vulnerable Extensions List (Joomla!)