Joomla! Component Contact Form Maker 1.0.1 - SQL Injection

Author: TUNISIAN CYBER
type: webapps
platform: php
port: 
date_added: 2015-03-30  
date_updated: 2016-12-19  
verified: 0  
codes: CVE-2015-2798;OSVDB-120067  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 36561.txt  

[+]Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability
[+]Author: TUNISIAN CYBER
[+]Date: 29/03/2015
[+]Vendor: http://extensions.joomla.org/extensions/extension/contacts-and-feedback/contact-forms/contact-form-maker
[+]Type:WebApp
[+]Risk:High
[+]Overview:
Contact Form Maker v1.0.1 suffers, from an SQL injection vulnerability.

[+]Proof Of Concept:

127.0.0.1/index.php?option=com_contactformmaker&view=contactformmaker&id=SQL