My server is running Sitelock Pro which has identified a high priority security vulnerability. I am using Joomla 3.5.1. They have reported the following as a potential CGI Generic SQL Injection Issue.
Using the GET HTTP method, SiteLock found that :
+ The following resources may be vulnerable to blind SQL injection :
+ The 'view' parameter of the /index.php CGI :
/index.php?password=&username=&task=user.login&return=aHR0cDovL2Fnc2hvd3 Nuc3cub3JnLmF1Lw%3d%3d&remember=yes&846aab23bf47149946862bda9334e253=1&a 3eed60704e56fd53c721c36000f958c=1&format=json&option=com_ajax&view=remin d)+or+(1=1
-------- output --------
HTTP/1.1 200 OK
-------- vs --------
HTTP/1.1 406 Not Acceptable
Any idea on what is causing this and how to fix it?