CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
What the vulnerability does
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specification) GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQL WHERE clauses without parameterization or escaping. An unauthenticated attacker can inject arbitrary SQL through these parameters, enabling full database extraction via time-based blind techniques.
Explanation of Vulnerability in Simple Terms
Phoca Cart for Joomla versions 5.0.0 through 6.1.6 contain a SQL injection vulnerability in an unspecified component. An attacker can send a malicious request over the network to execute arbitrary SQL queries against the site's database without authentication. This allows reading, modifying, or deleting sensitive data including customer information and orders.
What an attacker can do
Execute arbitrary SQL queries to read, modify, or delete database records without authentication.
Potential impact on your site
Customer data, orders, and site configuration can be stolen, altered, or destroyed by remote attackers.
Conditions required to exploit
Network access to the Joomla site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
