Executive brief
EkRishta, a matrimonial and community extension for the Joomla content management system, contains a security flaw in its login system. An unauthorized attacker can use this flaw to access the website's underlying database without needing a password. This could lead to the theft of sensitive user information, including login credentials and personal system details, potentially compromising the entire website and its user base.
Technical details
An error-based SQL injection vulnerability exists in the EkRishta component (version 2.10 and likely earlier) for Joomla. The flaw is located in the 'username' parameter of the login endpoint, which fails to properly sanitize user input before including it in a database query. An unauthenticated remote attacker can exploit this by sending a specially crafted POST request to the sign-in page (e.g., /index.php/login/sign-in). By using SQL functions like 'extractvalue', an attacker can trigger database error messages that reveal sensitive information such as database version, user accounts, and password hashes. The extension has been unpublished from the Joomla Extension Directory, and users are advised to discontinue its use.
Affected products
- JoomlaExtensions.co.in EkRishta 2.10 and earlier
Timeline
- 2018-06-11: disclosed: Initial exploit proof-of-concept published by L0RD
- 2026-05-23: advisory: CVE record published/updated via VulnCheck