what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 1 - 1 of 1 RSS Feed

Files

Joomla BookLibrary From Same Author Module "id" SQL Injection
Posted Jul 6, 2010
Site secunia.com

Secunia Research has discovered a vulnerability in the BookLibrary From Same Author module for Joomla, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the "id" parameter to index.php (when "option" is set to "com_booklibrary" and "task" is set to "view") is not properly sanitized before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Version 1.5 is affected.

tags | advisory, arbitrary, php, sql injection
SHA-256 | 1b6681317886c2c7b9422ba4c5199bfce4e3692a8ca9a537721c207cdbf69c88
Page 1 of 1
Back1Next

Top Authors In Last 30 Days

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close