Published: 19/04/2010 Updated: 11/06/2010

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote malicious users to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
rockettheme com_rokmodule 1.1

================================================================================================================== [o] Joomla Component RokModule Blind SQLi [moduleid] Vulnerability Software : com_rokmodule version 11 Vendor : wwwrocketthemecom/ Author : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ] ...

Titulo: Joomla Component RokModule Blind SQLi [module] Vulnerability Nombre del Componente: Com_rokmodule Empresa: wwwrocketthemecom/ Testeado: Linux Backtrack Autor: Yarolinux Para WebSecurityDev Twitter: @Yarolinux Fecha: 09/09/2012 Bueno la Injeccion Va de la siguiente manera: localhost/indexphp?option=com_rokmodule&t ...

CWE-89 http://www.rockettheme.com/extensions-updates/673-rokmodule-security-update-released http://www.securityfocus.com/bid/39378 http://secunia.com/advisories/39255 http://packetstormsecurity.org/1004-exploits/joomlarokmodule-bsql.txt http://www.rockettheme.com/extensions-downloads/free/rokmodule/1040-rokmodule-component/download http://www.exploit-db.com/exploits/12148 https://nvd.nist.gov https://www.exploit-db.com/exploits/12148/

CVE-2010-1479

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect