vendor:
Clantools
by:
Stephan Sattler
7,5
CVSS
HIGH
Blind SQL Injection
89
CWE
Product Name: Clantools
Affected Version From: 1.5
Affected Version To: 1.5
Patch Exists: Yes
Related CWE: N/A
CPE: a:joomla-clantools:clantools
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability
A Blind SQL Injection vulnerability was discovered in Joomla Component Clantools version 1.5. An attacker can exploit this vulnerability by sending a malicious SQL query to the vulnerable parameter 'squad' in the URL. This can allow the attacker to gain access to sensitive information from the database.
Mitigation:
A patch is available from http://www.joomla-clantools.de
