This host is installed with Joomla RSfiles and is prone to sql injection vulnerabilities.

Successful exploitation will allow remote attackers to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data. Impact Level: Application

Upgrade to Joomla RSfiles REV 12 or later. For updates refer http://www.rsjoomla.com/joomla-extensions/joomla-download-manager.html

Input passed via the 'cid' GET parameter to index.php (when 'option' is set to 'com_rsfiles', 'view' is set to 'files', 'layout' is set to 'agreement', and 'tmpl' is set to 'component') is not properly sanitised before being used in a SQL query.

Joomla RSfiles

• http://secunia.com/advisories/52668
• http://www.exploit-db.com/exploits/24851
• http://www.osvdb.com/91448
• http://www.securelist.com/en/advisories/52668

---

Updated on 2017-03-28