vendor:
AkoBook
by:
Ab1i
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: AkoBook
Affected Version From: SE 2.3
Affected Version To: SE 2.3
Patch Exists: NO
Related CWE: N/A
CPE: a:saddo:akobook
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Joomla Component com_akobook Vulnerability
A vulnerability in the Joomla Component com_akobook allows an attacker to inject arbitrary SQL commands. This vulnerability is due to the lack of input validation in the 'gbid' parameter of the 'index.php' script when handling a 'reply' action. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing malicious SQL commands to the vulnerable application. Successful exploitation could result in unauthorized access to sensitive information or the execution of arbitrary SQL commands in the back-end database.
Mitigation:
Input validation should be performed to ensure that user-supplied data is properly sanitized.
