header-logo
Suggest Exploit
vendor:
Soccer Bet
by:
Mojtaba MobhaM
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Soccer Bet
Affected Version From: 4.1.5
Affected Version To: 4.1.5
Patch Exists: NO
Related CWE: N/A
CPE: a:joomla:joomla:4.1.5
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2017

Joomla Component Soccer Bet 4.1.5 – SQL Injection

The Joomla Component Soccer Bet 4.1.5 is vulnerable to SQL Injection. The 'cat' parameter is vulnerable to SQL Injection when passed via the URL. An attacker can inject malicious SQL queries to gain access to sensitive information from the database.

Mitigation:

Input validation should be used to prevent SQL Injection attacks. All user-supplied input should be validated and filtered before being used in an SQL query.
Source

Exploit-DB raw data:

# Exploit Title: Joomla Component Soccer Bet 4.1.5 - SQL Injection
# Date: 2017-02-11
# Home : https://extensions.joomla.org/extensions/extension/sports-a-games/tips-a-betts/soccer-bet/
# Exploit Author: Persian Hack Team
# Discovered by : Mojtaba MobhaM (kazemimojtaba@live.com)
# Home : http://persian-team.ir/
# Telegram Channel AND Demo: @PersianHackTeam
# Google Dork : inurl:index.php?option=com_soccerbet
# Tested on: Linux

# POC :
# Cat Parameter Vulnerable to SQL Injection
# http://www.Target.com/index.php?option=com_soccerbet&view=matches&cat=[SQL]

# Greetz : T3NZOG4N & FireKernel & Milad Hacking And All Persian Hack Team Members
# Iranian white hat Hackers

Navigation

Suggest Exploit

Services By CQR