The host is running Joomla and is prone to SQL injection vulnerability.

Successful exploitation will allow remote attackers to execute arbitrary SQL commands in applications database and gain complete control over the vulnerable web application. Impact Level: Application

Upgrade to version 3.2.3 or later, For updates refer to http://www.joomla.org

The flaw is due to an improper validation of 'id' parameter passed to 'index.php' script.

Joomla version 3.2.1 and probably other versions.

Send a crafted exploit string via HTTP GET request and check whether it is possible to execute sql query.

• http://www.exploit-db.com/exploits/31459/

---

Updated on 2017-03-28