Joomla! Component My Car 1.0 – Multiple Vulnerabilities

• Exploit Database
• 15 阅读

• 作者： Valentin
  日期： 2010-05-28
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12779/

• # Exploit Title: Joomla Component My Car Multiple Vulnerabilities
  # Date: 28th May 2010
  # Author: Valentin
  # Category: webapps/0day
  # Version: 1.0
  # Tested on: 
  # CVE :
  # Code : 
  
  
  [:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
  >> General Information 
  Advisory/Exploit Title = Joomla Component MyCar Multiple Vulnerabilities
  Author = Valentin Hoebel
  Contact = valentin@xenuser.org
  
  
  [:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
  >> Product information
  Name = My Car
  Vendor = unisoft.me
  Vendor Website = http://www.unisoft.me/extensions/
  Affected Version(s) = 1.0
  
   
  [:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
  >> XSS 
  Example URI:
  index.php?option=com_mycar&task=1&pagina=0&ordine=preveh&modveh=[XSS]
  
  
  >> Information Disclosure
  Just play around with the parameters and URLS. You will notice that various errors
  (e.g. SQL errors) occur. They reveal information about the SQL queries within the
  PHP code and the absolute path of the website. Not very dangerous, but sometimes useful.
  
  
  >> Possible SQL Injection
  Triggering SQL errors with the help of several parameters is possible.
  Example URI:
  index.php?option=com_mycar&task=1&pagina=-1
  
  
  [:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
  >> Additional Information
  Advisory/Exploit Published = 28th May 2010
  
  
  [:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
  >> Misc
  Greetz && Thanks = inj3ct0r team, Exploit DB and hack0wn!
  Special Greetz = cr4wl3r and /JosS!
  <3 packetstormsecurity.org!
  
  
  [:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]