Joomla com_jnewspaper (cid) SQL Injection Vulnerability
Posted on 20 April 2010
======================================================= Joomla com_jnewspaper (cid) SQL Injection Vulnerability ======================================================= /************************************************************************** [!] Joomla com_jnewspaper (cid) SQL Injection Vulnerability [!] Author : Don Tukulesto (root@indonesiancoder.com) [!] Homepage : http://indonesiancoder.com [!] Date : Tue, April 20, 2010 [!] Tune in : http://antisecradio.fm (choose your weapon) **************************************************************************/ [ Software Information ] [>] Vendor : http://emultisoft.net [>] Download : http://emultisoft.net/View-document-details/3-Online-News-Paper-Manager.html [>] Name : Online News Paper Manager [>] Version : [>] License : GPL [>] Type : Non-Commercial [>] Method : SQL Injection ======================================================== [ Proof of Concept ] http://server/path/index.php?option=com_jnewspaper&cid=31337 ======================================================== # Inj3ct0r.com [2010-04-20]
