Joomla! Spider Contacts 'index. php' SQL Injection Vulnerability

Joomla! Spider Contacts 'index. php' SQL Injection Vulnerability

Release date:
Updated on:

Affected Systems:
Joomla! Spider Contacts <= 1.3.6
Description:
Bugtraq id: 69757

Joomla! Spider Contacts is Joomla! To facilitate the management of contact information.

Spider Contacts 1.3.6 and earlier versions have the SQL injection vulnerability. After successful exploitation, unauthorized database operations can be performed.

<* Source: fig
*>

Test method:

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!
The following test method is provided:

Http://www.securityfocus.com/data/vulnerabilities/exploits/69757.py

Suggestion:
Vendor patch:

Joomla!
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://web-dorado.com/
Http://web-dorado.com /? Option = com_wdsubscriptions & view = dwnldfree & format = row & id = 60 (fixed)

This article permanently updates the link address: