vendor:
N/A
by:
DevilZ TM
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
Joomla Component com_departments SQL Injection Vulnerability
The vulnerability exists due to insufficient sanitization of user-supplied input in the 'id' parameter of the 'com_departments' component. A remote attacker can send a specially crafted request to the vulnerable application and execute arbitrary SQL commands in application's database. This can be exploited to disclose sensitive information, modify data, compromise the application, access or delete data, or exploit latent vulnerabilities in the underlying database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. It is recommended to use parameterized queries (prepared statements) when working with databases.
