Joomla VirtueMart Module (Customers_who_bought...) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Joomla VirtueMart Module (Customers_who_bought...) SQL Injection Vulnerability
# Published : 2010-01-27
# Author : B-HUNT3|2
# Previous Title : Joomla Component com_ccnewsletter LFI Vulnerability
# Next Title : Joomla Component (com_virtuemart) order_status_id SQL Injection Vulnerability

[~]>> ...[BEGIN ADVISORY]...

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> TITLE: Joomla Module (Customers_who_bought...) SQL Injection Vulnerability 
[~]>> LANGUAGE: PHP
[~]>> DORK: N/A
[~]>> RESEARCHER: B-HUNT3|2
[~]>> CONTACT: bhunt3r[at_no_spam]gmail[dot_no_spam]com
[~]>> TYPE: COMMERCIAL
[~]>> PRICE: 14,95