Joomla Com Joobb Forum Parameter SQL Injection Vulnerability

Overview

» IDS/IPS Signatures

Security Sites

iPolicy Networks Security Advisory


Date Discovered:	06/10/2008
Severity:	High
Applications Affected	Joomla with Com_Joobb 0.5.9

Synopsis

SQL injection vulnerability has been identified in Joomla with Com_Joobb 0.5.9

Recommended Actions

Upgrade with latest patch.
http://www.joomla.org/

Threat Analysis

Joomla is an open source content management system that will help user`s to build websites and other online applications. It consist of lot of modules and components. Content management system(CMS) is a computer software system for organizing and facilitating collaborative creation of documents and other contents. CMS is frequently used as web application for managing web sites and web contents.

An SQL injection vulnerabilities have been identified in Joomla with com_joobb version 0.5.9. This issue is due to a failure in the index.php to properly sanitize user-supplied input through forum parameter in forum action. An attacker can take advantage of this issue to execute arbitrary sql commands.

References

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2651
http://xforce.iss.net/xforce/xfdb/42791
http://www.joomla.org/

Write-up by: Vinod Sharma

Security Sites

“iPolicy is one of the most visionary firewall vendors in the firewall Magic Quadrant. Its architecture of a central session processing engine and multiple content blades that are able to block based on signatures, rules and so on is the closest to the network security ideal.”

Greg Young, John Pescatore
Magic Quadrant for Network Firewalls, 2H04, Gartner

| | | | | | | | |