Joomla com_projectlog Blind SQL injection Vulnerability

=======================================================
Joomla com_projectlog Blind SQL injection Vulnerability
=======================================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name :   Joomla com_reportcard BSqli Vulnerability
Date : july 5,2010
Critical Level     : HIGH
vendor URL :http://thethinkery.net
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description :
Project Log is a simple project management tool for tracking projects. Originally developed for field surveyors and construction management.

You can add a project, add and update log entries for that project, upload documents associated with the project and set project status as

the project progresses. You may also set users as managers, project leads, specify your client and project type, and more! Set all of your

contract dates and crew deployment dates with easy to use pop up calendars for quick changes to your ongoing projects.

You can set authority levels to restrict viewing or editing projects or project logs by group membership. Logs and timestamps submissions so

you can track who added notes/documents etc.

#######################################################################################################
Xploit :BSQli Vulnerability

DEMO URL :http://extensions.thethinkery.net/index.php?option=com_projectlog&view=cat&id=[Bsqli]

###############################################################################################################
# 0day no more
# Sid3^effects 



#  0day.today [2018-02-15]  #