vendor:
Joomla Component com_jtips
by:
Chip D3 Bi0s
7,5
CVSS
HIGH
Blind SQL-injection
89
CWE
Product Name: Joomla Component com_jtips
Affected Version From: 1.0.7
Affected Version To: 1.0.9
Patch Exists: YES
Related CWE: N/A
CPE: a:joomla:joomla
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Joomla Component com_jtips (season) Blind SQL-injection Vulnerability
A Blind SQL-injection vulnerability exists in the Joomla Component com_jtips (season). An attacker can inject malicious SQL code into the 'season' parameter of the 'index.php' script. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. This can be used to disclose the contents of the database, modify data, delete data, or potentially gain administrative access to the application.
Mitigation:
Ensure that user input is properly sanitized and validated before being used in SQL queries.
