|
|
| |
| "BSQ Sitestats is a site stats module that is lightweight on the front end but offers both tabular and graphical summaries of site visitors' sessions on the backend". Secunia Research has discovered some vulnerabilities in the BSQ Sitestats component for Joomla, which can be exploited by malicious people to conduct script insertion or SQL injection attacks. |
| |
Credit:
The information has been provided by Secunia Research.
The original article can be found at: http://secunia.com/secunia_research/2006-65/
|
| |
Vulnerable Systems:
* Joomla BSQ Sitestats version 1.8.0
* Joomla BSQ Sitestats version 2.2.1
Immune Systems:
* Joomla BSQ Sitestats version 2.2.2
1) Input passed via the "HTTP Referer" Header is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which is executed in an administrative user's browser session in context of an affected site when the site statistics are viewed.
2) Input passed via the URI string is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
Successful exploitation requires that "magic_quotes_gpc" is disabled.
Time Table:
28/09/2006 - Vendor notified
29/09/2006 - Vendor response
18/10/2006 - Public disclosure
|
|
|
