vendor:
com_allhotels
by:
Hussin X
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: com_allhotels
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Joomla Component com_allhotels (id) Blind SQL Injection Vulnerability
A Blind SQL Injection vulnerability exists in the Joomla Component com_allhotels (id) which allows an attacker to inject malicious SQL queries into the application. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code in the 'id' parameter in the 'index.php' script. An attacker can exploit this vulnerability to gain access to the database and potentially gain access to sensitive information.
Mitigation:
Input validation should be used to prevent SQL injection attacks. The application should also be configured to use the least privileged user account with access to the database.
