Joomla component jp_jobs SQL Injection Vulnerability

EDB-ID: 12037 CVE: 2010-1350 OSVDB-ID: 63534
Verified: Author: Valentin Published: 2010-04-03
Download Exploit: Source Raw Download Vulnerable App: N/A
:: General information
:: Joomla component jp_jobs SQL Injection vulnerability
:: by Valentin Hoebel

:: Product information
:: Name = jp_jobs
:: Vendor = Joomla! Projects
:: Vendor Website =
:: About the product =
:: Affected versions = All, latest one is 1.4.1
:: Google dork: "inurl:index.php?option=com_jp_jobs"

:: SQL Injection vulnerability
The component is extremly useful when it comes down to implementing some sort of job portal into your Joomla website.
Injecting SQL commands while viewing details about a job is possible.

Vulnerable URL

Test URL

Exploit vulnerability, e.g. by displaying the MySQL user: