vendor:
JVideo! Component
by:
Chip D3 Bi0s
7,5
CVSS
HIGH
SQL injection
89
CWE
Product Name: JVideo! Component
Affected Version From: 0.3.11c Beta
Affected Version To: 0.3.11c Beta
Patch Exists: NO
Related CWE: N/A
CPE: a:infinovision.com:jvideo
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Joomla Component com_jvideo (user_id) SQL-injection Vulnerability
A SQL injection vulnerability exists in Joomla Component com_jvideo, which can be exploited by malicious people to conduct SQL injection attacks. The vulnerability is caused due to the user_id parameter in the index.php script not being properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Successful exploitation may allow execution of arbitrary SQL code in the context of the database user.
Mitigation:
Input validation should be used to prevent SQL injection attacks.
