vendor:
N/A
by:
DevilZ TM
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
Joomla Component com_radio SQL Injection Vulnerability
A SQL injection vulnerability exists in the Joomla Component com_radio. An attacker can send a malicious SQL query to the vulnerable parameter 'id' in the 'exibi_descricao' task of the 'com_radio' component. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Successful exploitation may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Mitigation:
Input validation should be used to prevent SQL injection attacks. The application should also be configured to use the least privileged account with access to the database.
