Joomla JS Jobs Plugin SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the JS Jobs plugin for Joomla, affecting versions 1.1.5 through 1.4.3. This vulnerability allows authenticated administrators to execute arbitrary SQL commands by manipulating the 'filter_email' parameter within the GDPR Erase Data Request search feature.

Impact

Exploitation of this vulnerability allows for arbitrary SQL command execution, which could lead to unauthorized data access or manipulation within the database.

Reproduction

To reproduce this vulnerability, an authenticated administrator can navigate to 'Dashboard >> GDPR >> Erase Data Request >> Search'. After capturing the search request that includes the 'filter_email' parameter, this request can be saved to a file and used with SQLMap to exploit the SQL injection vulnerability.