Joomla! sh404SEF Component Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
BID:45135
Info
Joomla! sh404SEF Component Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 45135 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-4405 CVE-2010-4404 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 29 2010 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | Jeff Channel |
| Vulnerable: |
Yannick Gaultier sh404SEF 2.1.7.761 |
| Not Vulnerable: |
Yannick Gaultier sh404SEF 2.1.8.777 |
Discussion
Joomla! sh404SEF Component Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
The sh404SEF component for Joomla! is prone to an SQL-injection vulnerability and a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to sh404SEF 2.1.8.777 are affected.
The sh404SEF component for Joomla! is prone to an SQL-injection vulnerability and a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to sh404SEF 2.1.8.777 are affected.
Exploit / POC
Joomla! sh404SEF Component Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.
Solution / Fix
Joomla! sh404SEF Component Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Joomla! sh404SEF Component Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
References:
References:
- Joomla! Homepage (Joomla!)
- sh404SEF Extension Homepage (Yannick Gaultier)
- Urgent sh404SEF security release: Joomla 1.5 (Yannick Gaultier)