Joomla Freestyle FAQ Lite Component 1.3 (faqid) SQL Injection

vendor:

Freestyle FAQ Lite

by:

Chip D3 Bi0s

N/A

CVSS

N/A

SQL Injection

CWE

Product Name: Freestyle FAQ Lite

Affected Version From: 1.3

Affected Version To: 1.3

Patch Exists: N/A

Related CWE: N/A

CPE: a:freestyle-joomla:freestyle_faq_lite

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Joomla

2010

Joomla Freestyle FAQ Lite Component 1.3 (faqid) SQL Injection

A vulnerability exists in Freestyle FAQ Lite Component 1.3 (faqid) which allows an attacker to inject arbitrary SQL commands via the faqid parameter in the URL. An attacker can exploit this vulnerability to gain access to sensitive information from the database.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in SQL queries.

Source

Exploit-DB raw data:

---------------------------------------------------------------------------------
Joomla Freestyle FAQ Lite Component 1.3 (faqid) SQL Injection
---------------------------------------------------------------------------------

Author		: Chip D3 Bi0s
Group		: LatinHackTeam
Email & msn	: chipdebios@gmail.com
Date		: 05 april 2010
Critical Lvl	: Moderate
Impact		: Exposure of sensitive information
Where		: From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~


Application	: Freestyle FAQ Lite 
version		: 1.3
Developer	: Freestyle Joomla
License		: GPLv2           type  : Non-Commercial
Date Added	: 22 March 2010
Download	: http://freestyle-joomla.com/fssdownloads/viewcategory/2
Demo		: http://freestyle-joomla.com/demo


Description     :

Freestyle FAQ Lite is designed to provide you with a highly customised
Frequently Asked Questions (FAQs) module on your Joomla website.
There are various customisable options, you can display FAQs under
a menu item or within a module.

• Multiple categories
• Search all FAQs
• Add an image for each category
• Link directly to a FAQ category or article from a menu item
• View all FAQs at once (option to hide this)
• Module to list FAQ categories anywhere on any page
• Full image and html support for each FAQ
• WYSIWYG editor for FAQs
• Attach full html description to each category FAQs can be toggled as published or unpublished
• Various Joomla back end parameters
• Multiple view modes for question list - Normal list - clicking a category takes you to a different page with FAQ list
• Multiple FAQ list modes - All questions and answers on one page


--------------

how to exploit

http://127.0.0.1/index.php?option=com_fss&view=faq&Itemid=4&catid=1&tmpl=component&faqid={sql}

------------------------


+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++