Exploit Database - Logo

Joomla! Component 'com_xmap' 1.2.11 - Blind SQL Injection

EDB-ID: 17525 Author: jdc Published: 2011-07-12
CVE: N/A Type: Webapps Platform: PHP
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: Download Vulnerable Application
« Previous Exploit Next Exploit » 
# Exploit Title: Xmap 1.2.11 Joomla Component Blind SQL Injection
# Date: 12 July 2011
# Author: jdc
# Software Link:
http://joomlacode.org/gf/project/xmap/frs/?action=FrsReleaseBrowse&frs_package_id=3882
# Version: 1.2.11
# Fixed In: 1.2.12

Versions prior to 1.2.12 suffer from a blind sql injection in the "view"
parameter, depending on Xmap's internal cache settings.

POSTDATA: option=com_xmap&tmpl=component&Itemid=999&view=[SQL]

1.2.12 has been patched. Older versions with cache=off cannot be
exploited in this fashion.

Related Exploits

Trying to match OSVDBs (1): 73831
Trying to match setup file: 2286122703a0019ad90f377768dfe277
Other Possible E-DB Search Terms: Joomla! Component 'com_xmap' 1.2.11,  Joomla! Component 'com_xmap
Date D V Title Author
No matches
Menu