vendor:
com_avosbillets
by:
Snakespc ALGERIAN HaCkEr
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: com_avosbillets
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Joomla (com_avosbillets) SQL injection Vulnerability
A vulnerability in Joomla's com_avosbillets component allows an attacker to inject arbitrary SQL commands via the 'id' parameter in the 'view' task. This can be exploited to gain access to the database and extract sensitive information such as usernames and passwords.
Mitigation:
Ensure that input is properly sanitized and validated before being used in SQL queries.
