CVE-2008-0799

SQL injection vulnerability in index.php in the Quiz comquiz 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

CVE-2008-0800: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the McQuiz commcquiz 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

joomlaquiz-sql.txt

joomla SQL Injectioncomquizusertstshw AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comquiz"tid" DORK 2 : allinurl: comquiz EXPLOIT : ALL PASSWORD AND USERNAME UNDER PAGE EXAMPLE: AFTER tid add...

Joomla! Component Quiz 0.81 - 'tid' SQL Injection

joomla SQL Injectioncomquizusertstshw AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: comquiz"tid" DORK 2 : allinurl: comquiz EXPLOIT : ALL PASSWORD AND USERNAME UNDER PAGE EXAMPLE: AFTER tid add...