Executive brief
PHP-Bridge is a Joomla component used to integrate PHP scripts into a website. A security flaw in this component allows an attacker to run unauthorized database commands without needing a password. This could lead to the theft of sensitive website information, including database structure and stored data.
Technical details
An SQL injection vulnerability exists in the PHP-Bridge component (com_phpbridge) for Joomla! version 1.2.3. The flaw is located in the handling of the 'id' parameter within the 'phpview' view. An unauthenticated remote attacker can exploit this by sending a specially crafted GET request to index.php, using UNION-based SQL injection to extract sensitive information from the database, such as table and column names. The vulnerability stems from improper neutralization of special elements used in an SQL command (CWE-89). A public exploit has been available since 2017.
Affected products
- Henryschorradt PHP-Bridge 1.2.3
Timeline
- 2017-08-02: disclosed: Exploit published on Exploit-DB
- 2026-06-19: advisory: NVD/VulnCheck advisory published