[VIM] Joomla! 'com_restaurante' Component 'id' Parameter SQL Injection Vulnerability

George A. Theall theall at tenable.com
Fri May 27 12:40:56 CDT 2011


Bugtraq 48012 was created today for a SQL injection vulnerability. It  
offers a link to a PoC but that's broken. And while the discussion  
doesn't hold details about which script and parameter(s) are affected,  
I suspect it's the same as http://packetstormsecurity.org/files/view/101735/joomlarestaurants-sql.txt 
.

If so, it looks like the vulnerability is already covered by BID  
28324, from back in 2008.

Rob?


George
-- 
theall at tenablesecurity.com





More information about the VIM mailing list