SecNews received a critical report regarding a 0-day vulnerability identified by Greek researchers and affecting websites using the well-known CMS Joomla
Greek security researchers Dimitrios Roussis and Evangelos Apostoloudis have identified a critical vulnerability of high importance, which has not been published (0-day), and allows sql injection in the ja-k2-filter-and-search component ( https://www.joomlart.com/joomla/extensions/ja-k2-search ) of Joomla .
This particular component is currently used by hundreds of websites around the world. Through this vulnerability and with well-known available tools such as sqlmap, one can achieve a complete recovery of the website database, with a particularly easy process, revealing in some cases very critical data. There are not a few e-shop websites that, through this weakness, can expose sensitive information such as member details, personal data or even credit card numbers!
This vulnerability, which is considered to be of very high risk, as we mentioned above, has not been officially published by any international site (0-day vulnerability), is not known to the company that created the component, and has not been integrated into online databases of known vulnerabilities.
Evidence
For any Joomla that uses this specific component, we can detect the vulnerability with the following request:
As a result, the following error message appears, proving the existence of the vulnerability.
Using sqlmap and the url we mentioned above, it is very easy to dump the database and read all the data.
Indicative websites
Some indicative pages (from a large set) that exhibit the vulnerability are listed below.
- https://www.active-business.gr/
- https://www.aquariancladding.co.uk/
- https://www.arhitektura.mrt.gov.me/
- https://www.athenian-yachts.gr
- https://www.bathroom-shop.gr/
- https://www.beactive.cy/
- https://www.bowmansales.com/
- https://www.cmvcapanema.pr.gov.br/
- https://www.dao-bzh.org/
- https://www.edeskati.gr/
- https://www.gardeshgar-ir.com/
- https://www.getravel.gr/
- https://www.gndr.org/
- https://www.holiday116.ru/
- https://www.html-template.ru/
- https://www.igctravel.co.uk/
- https://www.international-nightlife.com/
- https://www.internationalweddinginstitute.com/
- https://www.kidsland-nsk.ru/
- https://www.kingstonrv.com/
- https://www.l-proekt.com/
- https://www.mauritanie-online.com/
- https://www.mice.ru/
- https://www.nchasia.com/
- https://www.ohg-bensberg.de/
- https://www.rustyoptical.com/
- https://www.seam.gr/
- https://www.sherdoust.ir/
- https://www.tasteofedm.ca/
- https://www.transitec.net/
- https://www.usasciencefestival.org/
- https://proyectostipo.dnp.gov.co
- https://www.lvivrada.gov.ua/
- https://www.lvivrada.gov.ua/
- https://www.moriel.org/
