6.8
CVSSv2

CVE-2008-1559

Published: 31/03/2008 Updated: 29/09/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 690
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in the Bernard Gilly AlphaContent (com_alphacontent) 2.5.8 component for Joomla! allows remote malicious users to execute arbitrary SQL commands via the id parameter in a view action to index.php.

Vulnerable Product Search on Vulmon Subscribe to Product

bernard_gilly com_alphacontent 2.5.8

Exploits

#!/usr/bin/perl #eSploit Framework - Inphex use Digest::MD5 qw(md5 md5_hex md5_base64); use LWP::UserAgent; use HTTP::Cookies; use Switch; $host_ = shift; $path_ = shift; $id_ = shift; $non_find = shift; #choose anything thats inside the article of id $column = "username"; #change if needet $table = "jos_users"; #change if needet print "usage: $0 h ...
########################################## # # [ Joomla Component com_alphacontent SQL Injection ] # ########################################## [~] Vulnerability found by: cO2 [ Algeria Security Crew ] [~] Contact: c02[at]hotmailde [~] Website: wwwdzw0rmch [~] Greetings: to all hackers DZ ########################################## [~] Scr ...