ID de Prueba:	1.3.6.1.4.1.25623.1.0.107024
Categoría:	Web application abuses
Título:	Joomla J2Store 3.1.6 Multiple SQL Injection Vulnerabilities
Resumen:	Jommla J2Store is prone to multiple SQL injection vulnerabilities.
Descripción:	Summary: Jommla J2Store is prone to multiple SQL injection vulnerabilities. Vulnerability Insight: The first vulnerability was in the sortby parameter within a request made while searching for products. The second vulnerability was in an advanced search multipart form request, within the manufacturer_ids parameters. Vulnerability Impact: Successful exploitation will allow an unauthenticated remote attacker to execute arbitrary SQL commands via the (1) sortby or (2) manufacturer_ids[] parameter to index.php. Affected Software/OS: J2Store v3.1.6 and previous versions. Solution: Fixed in J2Store v3.1.7 version. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-6513 http://packetstormsecurity.com/files/132658/Joomla-J2Store-3.1.6-SQL-Injection.html http://volatileminds.net/2015/07/07/j2store-316-sql-injection.html
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.