RedShop 1.0.23.1 Joomla Component Blind SQL Injection Vulnerability

[vamba]

Estensione commerciale
Per aggiornamenti e patch fate riferimento al supporto

 Nome              RedShop
 Url            http://redweb.dk
 Versione 1.0.23.1

Codice: [Seleziona]

ANALYSIS
_____________
 
Summary:
 
 A) Blind SQL Injection
 
 
A) Blind SQL Injection
______________________
 
The parameters viewform and id are not properly sanitised
The  parameter  keyword  is not properly sanitised before
being  used  in  a  SQL  query. This  can be exploited to
manipulate SQL queries by injecting arbitrary SQL code.
 
Successful exploitation  requires that "magic_quotes_gpc"
is disabled.
 
 
SAMPLE CODE
_______________
 
A) Blind SQL Injection
 
Copy and past the following lines in the search form:
 
' AND (SELECT(IF(ASCII(0x41) = 64,false,NULL))) OR '
' AND (SELECT(IF(ASCII(0x41) = 65,true,NULL))) OR '
 
 
FIX
______
 
No fix.