header-logo
Suggest Exploit
vendor:
onisPetitions
by:
Mojtaba MobhaM
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: onisPetitions
Affected Version From: 2.5
Affected Version To: 2.5
Patch Exists: NO
Related CWE: N/A
CPE: a:joomla:onispetitions:2.5
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2017

Joomla Component onisPetitions 2.5 – SQL Injection

The tag parameter of the Joomla Component onisPetitions 2.5 is vulnerable to SQL Injection. An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable parameter.

Mitigation:

Input validation should be used to prevent SQL Injection attacks.
Source

Exploit-DB raw data:

# Exploit Title: Joomla Component onisPetitions 2.5 - SQL Injection
# Date: 2017-02-11
# Home : https://extensions.joomla.org/extensions/extension/contacts-and-feedback/polls/onispetitions/
# Exploit Author: Persian Hack Team
# Discovered by : Mojtaba MobhaM (kazemimojtaba@live.com)
# Home : http://persian-team.ir/
# Telegram Channel AND Demo: @PersianHackTeam
# Tested on: Linux

# POC :
# tag Parameter Vulnerable to SQL Injection
# http://www.Target.com/index.php?option=com_onispetitions&view=petitions&tag=[SQL]

# Greetz : T3NZOG4N & FireKernel & Milad Hacking And All Persian Hack Team Members
# Iranian white hat Hackers

Navigation

Suggest Exploit

Services By CQR