Joomla! Component com_liveticker - Blind SQL Injection

!/usr/bin/php » Greetz to: Spécial His0k4 Tous les hackers Algérie » Dork: inurl:index.php?option=comliveticker "viewticker" Joomla comliveticker tid Blind SQL Injection Exploit x Usage: Snakespc.php "http://url/index.php?option=comliveticker&task=viewticker&tid=1" '; if $argc 1 $url = $argv1; $r...

CVE-2008-6148: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Live Ticker comliveticker module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a viewticker action to index.php...