This host is running Joomla Minitek FAQ Book component and is prone to SQL injection vulnerability.

Successful exploitation will let attackers to manipulate SQL queries by injecting arbitrary SQL code. Impact Level: Application.

Upgrade to Joomla Minitek FAQ Book component version 1.4 or later. For updates refer to http://www.minitek.gr/

The flaw is due to input passed via the 'id' parameter to 'index.php' (when 'option' is set to 'com_faqbook' and 'view' is set to 'category') is not properly sanitised before being used in a SQL query.

Joomla Minitek FAQ Book component version 1.3

• http://packetstormsecurity.org/files/view/102195/joomlafaqbook-sql.txt
• http://secunia.com/advisories/44943
• http://www.exploit-id.com/web-applications/joomla-component-minitek-faq-book-sql-injection

---

Updated on 2015-03-25