13 lines
No EOL
477 B
Text
Executable file
13 lines
No EOL
477 B
Text
Executable file
[+]Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability
|
|
[+]Author: TUNISIAN CYBER
|
|
[+]Date: 29/03/2015
|
|
[+]Vendor: http://extensions.joomla.org/extensions/extension/contacts-and-feedback/contact-forms/contact-form-maker
|
|
[+]Type:WebApp
|
|
[+]Risk:High
|
|
[+]Overview:
|
|
Contact Form Maker v1.0.1 suffers, from an SQL injection vulnerability.
|
|
|
|
[+]Proof Of Concept:
|
|
|
|
127.0.0.1/index.php?option=com_contactformmaker&view=contactformmaker&id=SQL
|
|
|