Lucene search

Joomla SOBI2 2.9.3.2 SQL Injection

🗓️ 14 Jul 2011 00:00:00Reported by jdcType

packetstorm🔗 packetstormsecurity.com👁 26 Views

Joomla SOBI2 2.9.3.2 SQL Injection vulnerability in "tag" and "letter" parameter

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`# Exploit Title: SOBI2 2.9.3.2 Joomla! Component Blind SQL Injections  
# Date: 13 July 2011  
# Author: jdc  
# Software Link: http://www.sigsiu.net  
# Version: 2.9.3.2  
# Fixed In: 2.9.4  
# Verified: http://www.sigsiu.net/changelog as "# Bugfix: Blind SQL injection"  
  
Versions prior to 2.9.4 suffer from a blind sql injection in both the "tag" and "letter" parameters. The request MUST reach the site with these parameters urlencoded for the injection to succeed.  
  
POSTDATA: option=com_sobi2&tmpl=component&tag=[Encoded SQL]  
  
POSTDATA: option=com_sobi2&tmpl=component&letter=[Encoded SQL]  
  
Updated release: http://www.sigsiu.net/latest_news/sobi2_version_2.9.4_released.html   
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Jul 2011 00:00Current

0.2Low risk

Vulners AI Score0.2