Joomla Component com_beeheard Blind SQL injection Vulnerability
A Blind SQL injection vulnerability exists in the Joomla Component com_beeheard. An attacker can exploit this vulnerability to gain access to the admin login credentials. This can be done by sending a maliciously crafted HTTP request to the vulnerable server. The malicious request contains a SQL query that will return the username and password of the admin user. The malicious request is sent to the vulnerable server in the form of a URL. The URL contains a parameter called ‘category_id’ which is set to a value of ‘null’. This is followed by a ‘union’ statement which is used to concatenate the username and password of the admin user. The malicious request is then sent to the vulnerable server and the response will contain the username and password of the admin user.
