Check Point Advisories

Update Protection against Joomla! Jobline Component 'search' Parameter SQL Injection Vulnerability

Check Point Reference:	CPAI-2009-225
Date Published:	24 Jul 2009
Severity:	High
Last Updated:	Thursday 01 January, 2009
Source:	Bugtraq ID: 35728
Industry Reference:	N/A
Protection Provided by:
Who is Vulnerable?	Jobline 1.1.3 .1
Vulnerability Description	A SQL injection vulnerability exists in the Jobline component for Joomla!. The application fails to sufficiently sanitize user supplied data before using it in an SQL query. Successful exploitation could allow a remote attacker to compromise the application, access or modify data and launch other attacks.
Update/Patch Avaliable	We are not aware of any vendor supplied patches at the time of writing.
Vulnerability Details	Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit unpatched vulnerabilities in the database.