Security in Joomla! 5.x • Acunetix scan reports SQL Injection in com_content archive

Dear SIr,

By Acunetix Scan we have SQL Injection at con_content

Tests performed:
com_content'||' => TRUE
com_content'|||' => FALSE
com_content'||''||' => TRUE
com_content'||'000433'||' => FALSE
'||''||'com_content => TRUE
zzz'||'000433'||'com_content => FALSE
com_content000433 => FALSE
c'||'om_content => TRUE
c'|a|'om_content => FALSE

I tried to put below URL LInk to all of our joomla website which will bring to a page with filter on day, month, year

/index.php/component/content/archive?Itemid=101&id=20

Please advise us how to avoid or can we disable the com_content without affect the webiste operaiton?

Thanks indeed

Statistics: Posted by fc338339 — Fri Nov 22, 2024 3:20 am

---