15 lines
No EOL
705 B
Text
15 lines
No EOL
705 B
Text
source: https://www.securityfocus.com/bid/47595/info
|
|
|
|
Multiple Joostina components are prone to an SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data before using it in an SQL query.
|
|
|
|
Exploiting this issue could allow an attacker to compromise the applications, access or modify data, or exploit latent vulnerabilities in the underlying database.
|
|
|
|
The following components are vulnerable:
|
|
|
|
'com_frontpage' 1.3.0.4_stable
|
|
'com_users'
|
|
|
|
Other components may also be affected.
|
|
|
|
http://www.example.com/[Path]/index.php?option=com_users&task=profile&user=11+AND+1=0
|
|
http://www.example.com/[Path]/index.php?option=com_frontpage&Itemid=1&limit=4&limitstart=[SQL-Inj3cT-Here] |