vendor:
Joomla Component com_dms
by:
kaMtiEz
7,5
CVSS
HIGH
SQL injection
89
CWE
Product Name: Joomla Component com_dms
Affected Version From: 2.5.1
Affected Version To: 2.5.1
Patch Exists: YES
Related CWE: N/A
CPE: a:joomdonation:joomla_component_com_dms
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2010
Joomla Component com_dms Remote SQL injection vulnerability – (category_id)
An attacker can exploit this vulnerability by sending a malicious SQL query to the vulnerable parameter 'category_id' in the URL. This can be done by appending a malicious SQL query to the vulnerable parameter in the URL. This can be done by appending a malicious SQL query to the vulnerable parameter in the URL. This can allow an attacker to gain access to sensitive information such as usernames and passwords stored in the database.
Mitigation:
The vendor has released a patch to address this vulnerability. It is recommended to update the software to the latest version.
