Joomla! 'com_tag' Component CVE-2017-15946 SQL Injection Vulnerability



The com_tag component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
An attacker may leverage this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Information

Bugtraq ID: 101942
Class: Input Validation Error
CVE: CVE-2017-15946

Remote: Yes
Local: No
Published: Nov 23 2017 12:00AM
Updated: Nov 23 2017 12:00AM
Credit: Amir - Iranian Exploit Database
Vulnerable: Joomla com_tag 1.7.6


Not Vulnerable:

Exploit


Attackers can use a browser to exploit this issue.
The following example URI is available:
http://example.com/index.php?option=com_tag&task=tag&tag=-`[SQL-Injection Vulnerability!]--


Related Posts

Comments