Soluzione Mambo :
A SQL injection vulnerability has been identified in Mambo versions <= 4.6RC1. Meaning that current production version 4.5.4 as well as recent versions 4.5.3h, 4.5.3, and 4.5.2.3 are at risk. The quickest way to plug this hole is to open /components/com_weblinks/weblinks.php and add the following two lines at line 250.
Code:
PHP Code:
$row->title = $database->getEscaped($row->title);
$row->catid = $database->getEscaped($row->catid);
We recommend you patch this as soon as possible. For those not comfortable with editing the files manually we will get some patches up on "The Source" soon.
Per chi non comprende inglese
E' stato trovato un SQL injection vulnerability le versioni di mambo con questo problema sono : 4.6RC1, 4.5.4, 4.5.3h, 4.5.3, and 4.5.2.3
Aprire il file /components/com_weblinks/weblinks.php e aggiungere queste due righe dopo la riga 250.
Code:
PHP Code:
$row->title = $database->getEscaped($row->title);
$row->catid = $database->getEscaped($row->catid);
Si raccomanda di farlo prima possibile, molto presto sarà disponibile la patch per chi non si sente di modificare i file.
Soluzione Joomla:
open /components/com_weblinks/weblinks.php, find:
Codice:
PHP Code:
/**
* Saves the record on an edit form submit
* @param database A database connector object
*/
function saveWeblink( $option ) {
global $mosConfig_mailfrom, $mosConfig_fromname;
global $database, $my;
if ($my->gid < 1) {
mosNotAuth();
return;
}
replace it with:
Codice:
PHP Code:
/**
* Saves the record on an edit form submit
* @param database A database connector object
*/
function saveWeblink( $option ) {
global $mosConfig_mailfrom, $mosConfig_fromname;
global $database, $my;
if ($my->gid < 1) {
mosNotAuth();
return;
}
// security check to see if link exists in a menu
$link = 'index.php?option=com_weblinks&task=new';
$query = "SELECT id"
. "\n FROM #__menu"
. "\n WHERE link LIKE '%$link%'"
. "\n AND published = 1"
;
$database->setQuery( $query );
$exists = $database->loadResult();
if ( !$exists ) {
mosNotAuth();
return;
}
Informazioni sul problema le può trovare ai seguenti link
joomla : http://www.milw0rm.com/exploits/1922
mambo : http://www.milw0rm.com/exploits/1920
Mambo/Joomla : A SQL injection vulnerability com_weblink 
Linear Mode
