Joomla! 'com_photoblog' Component 'blog' Parameter SQL Injection Vulnerability

Bugtraq ID:	38136
Class:	Input Validation Error
CVE:	CVE-2010-0610
Remote:	Yes
Local:	No
Published:	Feb 06 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	ALTBTA
Vulnerable:	webguerilla Photoblog alpha 3a
Not Vulnerable:	webguerilla Photoblog alpha 3b

Joomla! 'com_photoblog' Component 'blog' Parameter SQL Injection Vulnerability

The 'com_photoblog' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to Photoblog alpha3b are vulnerable.

Joomla! 'com_photoblog' Component 'blog' Parameter SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/index.php?option=com_photoblog&view=images&category=1&celebs&blog=1+and<http://www.site.com/index.php?option=com_photoblog&view=images&category=1&celebs&blog=1+and> substring(@@version,1,1)=5

Joomla! 'com_photoblog' Component 'blog' Parameter SQL Injection Vulnerability

Solution:
Updates are available; please see the references for more information.


webguerilla Photoblog alpha 3a

• webguerilla com_photoblog_alpha-3b-full.zip
  http://webguerilla.net/downloads/components-for-joomla-1/24-photoblog- gallery-component-full/download

Joomla! 'com_photoblog' Component 'blog' Parameter SQL Injection Vulnerability

References:

• Security Update for Photoblog (webguerilla)
  
• Vendor Homepage (webguerilla)