header-logo
Suggest Exploit
vendor:
onisQuotes
by:
Persian Hack Team
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: onisQuotes
Affected Version From: 2.5
Affected Version To: 2.5
Patch Exists: NO
Related CWE: N/A
CPE: a:joomla:onisquotes:2.5
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2017

Joomla Component onisQuotes 2.5 – SQL Injection

The tag parameter of the Joomla Component onisQuotes 2.5 is vulnerable to SQL Injection. An attacker can inject malicious SQL queries into the parameter and gain access to the database.

Mitigation:

Input validation should be used to prevent SQL injection attacks.
Source

Exploit-DB raw data:

# Exploit Title: Joomla Component onisQuotes 2.5 - SQL Injection
# Date: 2017-02-11
# Home : https://extensions.joomla.org/extensions/extension/news-display/quotes/onisquotes/
# Exploit Author: Persian Hack Team
# Discovered by : Mojtaba MobhaM (kazemimojtaba@live.com)
# Home : http://persian-team.ir/
# Telegram Channel AND Demo: @PersianHackTeam
# Tested on: Linux

# POC :
# tag Parameter Vulnerable to SQL Injection
# http://www.Target.com/index.php?option=com_onisquotes&view=quotes&tag=[SQL]&Itemid=180

# Greetz : T3NZOG4N & FireKernel & Milad Hacking And All Persian Hack Team Members
# Iranian white hat Hackers

Navigation

Suggest Exploit

Services By CQR