vendor:
Com_joomlub
by:
599eme Man
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Com_joomlub
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Joomla Compenent Com_joomlub (aid) Remote SQL Injection Vulnerabilities
The vulnerability exists due to insufficient filtration of user-supplied data passed via the 'aid' parameter to the '/index.php' script. A remote attacker can send a specially crafted request to the vulnerable script and execute arbitrary SQL commands in application's database. This can be exploited to read, modify or delete arbitrary data in the database, disclose sensitive information, bypass certain security restrictions, and compromise the application and the underlying system.
Mitigation:
Input validation should be used to prevent the exploitation of this vulnerability. It is also recommended to use least privileged accounts to access the database.
