CVE-2008-0800

CVE-2008-0800 is a SQL injection vulnerability in index.php of the McQuiz (com_mcquiz) 0.9 Final component for Joomla! that allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action. Affected product: McQuiz 0.9 Final. Root cause: unsafely constructe...

Joomla! Component MCQuiz 0.9 Final - 'tid' SQL Injection

joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE PASSWORD AND USERNAME UNDER PAGE...