Joomla! Full 'com_full' Component 'id' Parameter SQL Injection Vulnerability
BID:51616
Info
Joomla! Full 'com_full' Component 'id' Parameter SQL Injection Vulnerability
| Bugtraq ID: | 51616 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 21 2012 12:00AM |
| Updated: | Jan 21 2012 12:00AM |
| Credit: | the_cyber_nuxbie |
| Vulnerable: |
Joomla Full 0 |
| Not Vulnerable: | |
Exploit / POC
Joomla! Full 'com_full' Component 'id' Parameter SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/index.php?option=com_full&dzial=dam_prace&id=[SQLi]
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/index.php?option=com_full&dzial=dam_prace&id=[SQLi]
References
Joomla! Full 'com_full' Component 'id' Parameter SQL Injection Vulnerability
References:
References:
- Joomla! Homepage (Joomla!)