vendor:
com_joomradio
by:
Mr.tro0oqy
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: com_joomradio
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: No
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
Joomla Component com_joomradio SQL injection vulnerability
This vulnerability allows an attacker to inject malicious SQL code into the vulnerable application. The vulnerability exists in the com_joomradio component of Joomla, which is vulnerable to a SQL injection attack. The attacker can exploit this vulnerability by crafting a malicious SQL query and sending it to the vulnerable application. The query will be executed by the application, allowing the attacker to gain access to sensitive information such as usernames and passwords.
Mitigation:
To mitigate this vulnerability, the application should be configured to use parameterized queries instead of dynamic SQL queries. Additionally, input validation should be performed on all user-supplied input to ensure that it is valid and does not contain malicious code.
