Joomla J2 Jobs Authenticated SQL Injection Vulnerability

An authenticated SQL injection vulnerability has been identified in Joomla J2 Jobs version 1.3.0. This vulnerability allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information.

Impact

Exploitation of this vulnerability allows for authenticated SQL injection, enabling attackers to manipulate database queries and potentially access or modify sensitive database information.

Reproduction

To reproduce this vulnerability, send a POST request to the Joomla administrator index. Include a malicious 'sortby' value in the request. The injection can be verified by using a tool like sqlmap to extract database information.