Joomla En-Masse 6.4 SQL Injection

2016-06-15T00:00:00
ID PACKETSTORM:137483
Type packetstorm
Reporter Hamed Izadi
Modified 2016-06-15T00:00:00

Description

                                        
                                            `# Exploit Title: Joomla com_enmasse - SQL Injection  
  
# Author: [ Hamed Izadi ]  
  
#IRAN  
  
# Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse  
# Category: [ Webapps ]  
# Tested on: [ Win ]  
# Versions: 5.1-6.4  
# Date: 2016/06/15  
# Google Dork: inurl:component/enmasse/  
  
  
# PoC:  
# id Parameter Vulnerable To SQL  
  
# Demo:  
# http://example.com/component/enmasse/term?tmpl=component&id=2%27  
  
  
# Youtube: https://youtu.be/LB5qVnXhzXE  
  
# L u Arg  
`