Joomla Component My Car Multiple Vulnerabilities

vendor:

My Car

by:

Valentin

N/A

CVSS

N/A

Multiple Vulnerabilities

CWE

Product Name: My Car

Affected Version From: 1

Affected Version To: 1

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested: Not mentioned

2010

Joomla Component My Car Multiple Vulnerabilities

The Joomla Component My Car has multiple vulnerabilities including XSS, Information Disclosure, and Possible SQL Injection. The XSS vulnerability can be exploited by manipulating the 'modveh' parameter in the 'index.php?option=com_mycar&task=1&pagina=0&ordine=preveh&modveh=[XSS]' URI. The Information Disclosure vulnerability can be exploited by manipulating the parameters and URLs, which reveal SQL errors and website path information. The Possible SQL Injection vulnerability can be triggered by using the 'index.php?option=com_mycar&task=1&pagina=-1' URI.

Mitigation:

No mitigation provided.

Source

Exploit-DB raw data:

# Exploit Title: Joomla Component My Car Multiple Vulnerabilities
# Date: 28th May 2010
# Author: Valentin
# Category: webapps/0day
# Version: 1.0
# Tested on: 
# CVE :  
# Code : 


[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
>> General Information 
Advisory/Exploit Title = Joomla Component MyCar Multiple Vulnerabilities
Author = Valentin Hoebel
Contact = valentin@xenuser.org


[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
>> Product information
Name = My Car
Vendor = unisoft.me
Vendor Website = http://www.unisoft.me/extensions/
Affected Version(s) = 1.0

 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
>> XSS 
Example URI:
index.php?option=com_mycar&task=1&pagina=0&ordine=preveh&modveh=[XSS]


>> Information Disclosure
Just play around with the parameters and URLS. You will notice that various errors
(e.g. SQL errors) occur. They reveal information about the SQL queries within the
PHP code and the absolute path of the website. Not very dangerous, but sometimes useful.


>> Possible SQL Injection
Triggering SQL errors with the help of several parameters is possible.
Example URI:
index.php?option=com_mycar&task=1&pagina=-1


[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
>> Additional Information
Advisory/Exploit Published = 28th May 2010


[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
>> Misc
Greetz && Thanks = inj3ct0r team, Exploit DB and hack0wn!
Special Greetz = cr4wl3r and /JosS!
<3 packetstormsecurity.org!


[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]