Email us! Subscribe to Liquidmatrix!

Joomla! “id” Parameter SQL Injection Vulnerability

I had tried using Joomla in the past on another project and I wasn’t overly enamoured with it. That being said there are literally thousands of people out there who are fans. With that we have a rather extensive install base. For those of you that are using Joomla please be aware of this vulnerability.

Description:
A vulnerability has been discovered in Joomla!, which can be exploited by malicious users to conduct SQL injection attacks.

For more information:
SA21644

The vulnerability has been confirmed in version 1.0.10. Other versions may also be affected.

Solution:
Edit the source code to ensure that input is properly sanitised.

Grant only trusted users “Editor” privileges.

Article Link

Tags: , ,

Tag It:
  • Digg
  • del.icio.us
  • Slashdot
  • Technorati
  • SphereIt
  • StumbleUpon
  • Fark
  • YahooMyWeb
  • Furl
  • Spurl
  • Ma.gnolia
  • NewsVine
Related Articles:

  • WordPress “admin-ajax.php” SQL Injection
  • SQL Injection Cheat Sheet
  • Top 15 free SQL Injection Scanners
  • MS Access SQL Injection Cheat Sheet
  • WordPress 2.0.5 SQL Injection Vulnerability
  • Leave a Comment